Bug 1133885 - [abrt] rpm: rpmReadSignature(): rpm killed by SIGABRT
Summary: [abrt] rpm: rpmReadSignature(): rpm killed by SIGABRT
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: rpm
Version: 20
Hardware: x86_64
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Packaging Maintenance Team
QA Contact: Fedora Extras Quality Assurance
URL: https://retrace.fedoraproject.org/faf...
Whiteboard: abrt_hash:4616c0fecbc067324716a21ba7a...
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2014-08-26 11:37 UTC by Jan Sedlák
Modified: 2014-10-04 03:26 UTC (History)
5 users (show)

Fixed In Version: rpm-4.11.3-1.fc20
Clone Of:
Environment:
Last Closed: 2014-09-19 09:58:32 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)
File: backtrace (9.49 KB, text/plain)
2014-08-26 11:37 UTC, Jan Sedlák
no flags Details
File: cgroup (180 bytes, text/plain)
2014-08-26 11:37 UTC, Jan Sedlák
no flags Details
File: core_backtrace (3.15 KB, text/plain)
2014-08-26 11:37 UTC, Jan Sedlák
no flags Details
File: dso_list (2.73 KB, text/plain)
2014-08-26 11:37 UTC, Jan Sedlák
no flags Details
File: environ (4.03 KB, text/plain)
2014-08-26 11:37 UTC, Jan Sedlák
no flags Details
File: limits (1.29 KB, text/plain)
2014-08-26 11:37 UTC, Jan Sedlák
no flags Details
File: maps (12.98 KB, text/plain)
2014-08-26 11:37 UTC, Jan Sedlák
no flags Details
File: open_fds (404 bytes, text/plain)
2014-08-26 11:37 UTC, Jan Sedlák
no flags Details
File: proc_pid_status (948 bytes, text/plain)
2014-08-26 11:38 UTC, Jan Sedlák
no flags Details
File: var_log_messages (1.22 KB, text/plain)
2014-08-26 11:38 UTC, Jan Sedlák
no flags Details
rpm package that rpm fails on (4.29 KB, audio/x-pn-realaudio-plugin)
2014-08-26 11:40 UTC, Jan Sedlák
no flags Details

Description Jan Sedlák 2014-08-26 11:37:46 UTC
Description of problem:
I am trying to implement program that extracts header from RPM package. I have created rpm that contains only lead + header and tried to run 'rpm -qp' on it and rpm showed double free or corruption error.

Version-Release number of selected component:
rpm-4.11.2-2.fc20

Additional info:
reporter:       libreport-2.2.3
backtrace_rating: 4
cmdline:        rpm -qp lo.rpm
crash_function: rpmReadSignature
executable:     /usr/bin/rpm
kernel:         3.15.10-200.fc20.x86_64
runlevel:       N 5
type:           CCpp
uid:            1000

Truncated backtrace:
Thread no. 1 (9 frames)
 #5 rpmReadSignature at signature.c:245
 #6 rpmpkgRead at package.c:529
 #7 rpmReadPackageFile at package.c:717
 #8 rpmgiReadHeader at rpmgi.c:90
 #9 rpmgiLoadReadHeader at rpmgi.c:126
 #10 rpmgiNext at rpmgi.c:216
 #11 rpmgiShowMatches at query.c:274
 #12 rpmcliArgIter at query.c:518
 #13 rpmcliQuery at query.c:568

Comment 1 Jan Sedlák 2014-08-26 11:37:50 UTC
Created attachment 930829 [details]
File: backtrace

Comment 2 Jan Sedlák 2014-08-26 11:37:51 UTC
Created attachment 930830 [details]
File: cgroup

Comment 3 Jan Sedlák 2014-08-26 11:37:52 UTC
Created attachment 930831 [details]
File: core_backtrace

Comment 4 Jan Sedlák 2014-08-26 11:37:54 UTC
Created attachment 930832 [details]
File: dso_list

Comment 5 Jan Sedlák 2014-08-26 11:37:55 UTC
Created attachment 930833 [details]
File: environ

Comment 6 Jan Sedlák 2014-08-26 11:37:56 UTC
Created attachment 930834 [details]
File: limits

Comment 7 Jan Sedlák 2014-08-26 11:37:57 UTC
Created attachment 930835 [details]
File: maps

Comment 8 Jan Sedlák 2014-08-26 11:37:59 UTC
Created attachment 930836 [details]
File: open_fds

Comment 9 Jan Sedlák 2014-08-26 11:38:00 UTC
Created attachment 930837 [details]
File: proc_pid_status

Comment 10 Jan Sedlák 2014-08-26 11:38:01 UTC
Created attachment 930838 [details]
File: var_log_messages

Comment 11 Jan Sedlák 2014-08-26 11:40:37 UTC
Created attachment 930841 [details]
rpm package that rpm fails on

Comment 12 Panu Matilainen 2014-08-27 07:12:40 UTC
Rpm packages must consist of
1) lead
2) signature header (+ padding)
3) main header
4) payload if the package has files

Your sample "package" is missing signature header, and as such cannot be read with rpmReadPackageFile(). That it crashes in this case is obviously a nasty bug, fixed now upstream:
http://rpm.org/gitweb?p=rpm.git;a=commitdiff;h=0ab486b8e169edbe66870f5ff43f9dd07ffd2655

Comment 13 Jan Sedlák 2014-08-27 08:22:42 UTC
Thank you, I have realized this yesterday. I think that my RPM has lead and signature header, but it isn't padded and it is missing main header. But still, double freeing memory is a bug.

Comment 14 Fedora Update System 2014-09-08 06:56:18 UTC
rpm-4.11.3-1.fc20 has been submitted as an update for Fedora 20.
https://admin.fedoraproject.org/updates/rpm-4.11.3-1.fc20

Comment 15 Fedora Update System 2014-09-09 22:05:10 UTC
Package rpm-4.11.3-1.fc20:
* should fix your issue,
* was pushed to the Fedora 20 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing rpm-4.11.3-1.fc20'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2014-10325/rpm-4.11.3-1.fc20
then log in and leave karma (feedback).

Comment 16 Fedora Update System 2014-09-16 07:49:49 UTC
rpm-4.11.3-1.fc19 has been submitted as an update for Fedora 19.
https://admin.fedoraproject.org/updates/rpm-4.11.3-1.fc19

Comment 17 Fedora Update System 2014-09-19 09:58:32 UTC
rpm-4.11.3-1.fc20 has been pushed to the Fedora 20 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 18 Fedora Update System 2014-10-04 03:26:51 UTC
rpm-4.11.3-1.fc19 has been pushed to the Fedora 19 stable repository.  If problems still persist, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.