Bug 1095880 - [abrt] iproute: get_dns_host(): ss killed by SIGSEGV
Summary: [abrt] iproute: get_dns_host(): ss killed by SIGSEGV
Keywords:
Status: CLOSED WORKSFORME
Alias: None
Product: Fedora
Classification: Fedora
Component: iproute
Version: 20
Hardware: x86_64
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Pavel Šimerda (pavlix)
QA Contact: Fedora Extras Quality Assurance
URL: https://retrace.fedoraproject.org/faf...
Whiteboard: abrt_hash:e5a1c1afb8273f61c0375918627...
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2014-05-08 17:57 UTC by Rafael Torato Rocha
Modified: 2015-03-14 00:22 UTC (History)
3 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2015-03-14 00:22:44 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)
File: backtrace (7.97 KB, text/plain)
2014-05-08 17:57 UTC, Rafael Torato Rocha
no flags Details
File: cgroup (172 bytes, text/plain)
2014-05-08 17:57 UTC, Rafael Torato Rocha
no flags Details
File: core_backtrace (1.60 KB, text/plain)
2014-05-08 17:57 UTC, Rafael Torato Rocha
no flags Details
File: dso_list (482 bytes, text/plain)
2014-05-08 17:57 UTC, Rafael Torato Rocha
no flags Details
File: environ (3.48 KB, text/plain)
2014-05-08 17:57 UTC, Rafael Torato Rocha
no flags Details
File: exploitable (81 bytes, text/plain)
2014-05-08 17:57 UTC, Rafael Torato Rocha
no flags Details
File: limits (1.29 KB, text/plain)
2014-05-08 17:57 UTC, Rafael Torato Rocha
no flags Details
File: maps (2.69 KB, text/plain)
2014-05-08 17:57 UTC, Rafael Torato Rocha
no flags Details
File: open_fds (141 bytes, text/plain)
2014-05-08 17:58 UTC, Rafael Torato Rocha
no flags Details
File: proc_pid_status (945 bytes, text/plain)
2014-05-08 17:58 UTC, Rafael Torato Rocha
no flags Details
File: var_log_messages (29.34 KB, text/plain)
2014-05-08 17:58 UTC, Rafael Torato Rocha
no flags Details

Description Rafael Torato Rocha 2014-05-08 17:57:35 UTC
Version-Release number of selected component:
iproute-3.14.0-1.fc20

Additional info:
reporter:       libreport-2.2.2
backtrace_rating: 4
cmdline:        ss hhmcefx
crash_function: get_dns_host
executable:     /usr/sbin/ss
kernel:         3.14.2-200.fc20.x86_64
runlevel:       N 5
type:           CCpp
uid:            1000

Truncated backtrace:
Thread no. 1 (5 frames)
 #1 get_dns_host at ss.c:1116
 #2 parse_hostcond at ss.c:1298
 #3 yylex at ssfilter.y:255
 #4 yyparse at ssfilter.c:1322
 #5 ssfilter_parse at ssfilter.y:270

Comment 1 Rafael Torato Rocha 2014-05-08 17:57:40 UTC
Created attachment 893719 [details]
File: backtrace

Comment 2 Rafael Torato Rocha 2014-05-08 17:57:45 UTC
Created attachment 893720 [details]
File: cgroup

Comment 3 Rafael Torato Rocha 2014-05-08 17:57:47 UTC
Created attachment 893721 [details]
File: core_backtrace

Comment 4 Rafael Torato Rocha 2014-05-08 17:57:49 UTC
Created attachment 893722 [details]
File: dso_list

Comment 5 Rafael Torato Rocha 2014-05-08 17:57:51 UTC
Created attachment 893723 [details]
File: environ

Comment 6 Rafael Torato Rocha 2014-05-08 17:57:53 UTC
Created attachment 893724 [details]
File: exploitable

Comment 7 Rafael Torato Rocha 2014-05-08 17:57:55 UTC
Created attachment 893725 [details]
File: limits

Comment 8 Rafael Torato Rocha 2014-05-08 17:57:58 UTC
Created attachment 893726 [details]
File: maps

Comment 9 Rafael Torato Rocha 2014-05-08 17:58:00 UTC
Created attachment 893727 [details]
File: open_fds

Comment 10 Rafael Torato Rocha 2014-05-08 17:58:02 UTC
Created attachment 893728 [details]
File: proc_pid_status

Comment 11 Rafael Torato Rocha 2014-05-08 17:58:04 UTC
Created attachment 893729 [details]
File: var_log_messages

Comment 12 Fedora Admin XMLRPC Client 2014-08-20 08:54:09 UTC
This package has changed ownership in the Fedora Package Database.  Reassigning to the new owner of this component.

Comment 13 Pavel Šimerda (pavlix) 2015-03-14 00:22:44 UTC
While this one's pretty old, I attempted to analyze it and my conclusion is that the crash occurs in the call to gethostbyname2("hhmcefx", AF_INET) which static storage for the result and thus should be generally safe. The program is single threaded so I don't see any reason to introduce an issue.

I would normally switch this bug report to glibc but unfortunately there is no debugging information for the glibc part. In this situation, closing will be the best thing to do for now.

Please reopen if you have more information.


Note You need to log in before you can comment on or make changes to this bug.