Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.
RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

Bug 1633173

Summary: /usr/bin/more double free or corruption
Product: Red Hat Enterprise Linux 7 Reporter: MarkS <m.v.sangster>
Component: util-linuxAssignee: Karel Zak <kzak>
Status: CLOSED WONTFIX QA Contact: qe-baseos-daemons
Severity: low Docs Contact:
Priority: unspecified    
Version: 7.5   
Target Milestone: rc   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2021-02-15 07:43:10 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
Breaking Excel File none

Description MarkS 2018-09-26 10:54:51 UTC
Description of problem:
Accidentally ran more on an Excel file, which I then quit and it caused a crash of more.

Version-Release number of selected component (if applicable):
util-linux-2.23.2-52.el7_5.1.x86_64

How reproducible:
If I run it on this specific file, it aborts every time.

Steps to Reproduce:
1. more file.xlsx
2. "q"uit
3. Aborts

1. more file.xlsx
2. page to end
3. Aborts

Actual results:
$ file (file).xlsx 
(file).xlsx: Microsoft Excel 2007+

$ more (file).xlsx 
PK
*** Error in `more': double free or corruption (!prev): 0x0000000000d03e20 ***
======= Backtrace: =========
/lib64/libc.so.6(+0x81429)[0x7f10a1946429]
more[0x403a5d]
more[0x405dd7]
more[0x4065b4]
more[0x4022b5]
/lib64/libc.so.6(__libc_start_main+0xf5)[0x7f10a18e73d5]
more[0x4025ab]
======= Memory map: ========
00400000-00409000 r-xp 00000000 fd:00 34257088                           /usr/bin/more
00608000-00609000 r--p 00008000 fd:00 34257088                           /usr/bin/more
00609000-0060a000 rw-p 00009000 fd:00 34257088                           /usr/bin/more
00cff000-00d20000 rw-p 00000000 00:00 0                                  [heap]
7f1094000000-7f1094021000 rw-p 00000000 00:00 0 
7f1094021000-7f1098000000 ---p 00000000 00:00 0 
7f109b186000-7f109b19b000 r-xp 00000000 fd:00 51473680                   /usr/lib64/libgcc_s-4.8.5-20150702.so.1
7f109b19b000-7f109b39a000 ---p 00015000 fd:00 51473680                   /usr/lib64/libgcc_s-4.8.5-20150702.so.1
7f109b39a000-7f109b39b000 r--p 00014000 fd:00 51473680                   /usr/lib64/libgcc_s-4.8.5-20150702.so.1
7f109b39b000-7f109b39c000 rw-p 00015000 fd:00 51473680                   /usr/lib64/libgcc_s-4.8.5-20150702.so.1
7f109b39c000-7f10a18c5000 r--p 00000000 fd:00 522028                     /usr/lib/locale/locale-archive
7f10a18c5000-7f10a1a88000 r-xp 00000000 fd:00 50333910                   /usr/lib64/libc-2.17.so
7f10a1a88000-7f10a1c87000 ---p 001c3000 fd:00 50333910                   /usr/lib64/libc-2.17.so
7f10a1c87000-7f10a1c8b000 r--p 001c2000 fd:00 50333910                   /usr/lib64/libc-2.17.so
7f10a1c8b000-7f10a1c8d000 rw-p 001c6000 fd:00 50333910                   /usr/lib64/libc-2.17.so
7f10a1c8d000-7f10a1c92000 rw-p 00000000 00:00 0 
7f10a1c92000-7f10a1cb7000 r-xp 00000000 fd:00 50401066                   /usr/lib64/libtinfo.so.5.9
7f10a1cb7000-7f10a1eb7000 ---p 00025000 fd:00 50401066                   /usr/lib64/libtinfo.so.5.9
7f10a1eb7000-7f10a1ebb000 r--p 00025000 fd:00 50401066                   /usr/lib64/libtinfo.so.5.9
7f10a1ebb000-7f10a1ebc000 rw-p 00029000 fd:00 50401066                   /usr/lib64/libtinfo.so.5.9
7f10a1ebc000-7f10a1ede000 r-xp 00000000 fd:00 51527619                   /usr/lib64/ld-2.17.so
7f10a20cd000-7f10a20d0000 rw-p 00000000 00:00 0 
7f10a20d1000-7f10a20d3000 rw-p 00000000 00:00 0 
7f10a20d3000-7f10a20da000 r--s 00000000 fd:00 22089865                   /usr/lib64/gconv/gconv-modules.cache
7f10a20da000-7f10a20dd000 rw-p 00000000 00:00 0 
7f10a20dd000-7f10a20de000 r--p 00021000 fd:00 51527619                   /usr/lib64/ld-2.17.so
7f10a20de000-7f10a20df000 rw-p 00022000 fd:00 51527619                   /usr/lib64/ld-2.17.so
7f10a20df000-7f10a20e0000 rw-p 00000000 00:00 0 
7ffe80b28000-7ffe80b49000 rw-p 00000000 00:00 0                          [stack]
7ffe80b9f000-7ffe80ba1000 r-xp 00000000 00:00 0                          [vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0                  [vsyscall]
Aborted

Expected results:
For more to quit cleanly.

Additional info:
I apologise but I cannot provide the Excel document due to the sensitive nature of the content within the file. I have managed to see this fault on two separate Excel files. I will attempt to reproduce the error with a generic file.

Comment 2 MarkS 2018-09-26 14:27:26 UTC
Created attachment 1487281 [details]
Breaking Excel File

Excel uses zip to compress its data. As such this is simply a zip.

Comment 3 Karel Zak 2018-09-27 09:28:41 UTC
Sounds like bug #1403971, but this bug should be already fixed since RHEL7.4 (util-linux-2.23.2-43.el7) :-(

I'll try it with your excel file. Thanks for your report.

Comment 6 RHEL Program Management 2021-02-15 07:43:10 UTC
After evaluating this issue, there are no plans to address it further or fix it in an upcoming release.  Therefore, it is being closed.  If plans change such that this issue will be fixed in an upcoming release, then the bug can be reopened.