Bug 190703 - ifconfig crashes when interface name is too long
Summary: ifconfig crashes when interface name is too long
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 4
Classification: Red Hat
Component: net-tools
Version: 4.0
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
: ---
Assignee: Radek Vokál
QA Contact: Ben Levenson
URL:
Whiteboard:
Depends On:
Blocks: 176344 234547
TreeView+ depends on / blocked
 
Reported: 2006-05-04 16:03 UTC by Bastien Nocera
Modified: 2007-11-30 22:07 UTC (History)
1 user (show)

Fixed In Version: RHBA-2007-0241
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2007-05-01 23:52:02 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)
net-tools-1.60-ifconfig-long-iface-crasher.patch (1011 bytes, patch)
2006-05-04 16:03 UTC, Bastien Nocera
no flags Details | Diff


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2007:0241 0 normal SHIPPED_LIVE net-tools bug fix update 2007-04-28 17:46:00 UTC

Description Bastien Nocera 2006-05-04 16:03:46 UTC
net-tools-1.60-37.EL4.7

1. Setup a VLAN
2. Use this VLAN to flood ping another machine
3. Check /proc/net/dev for the exceedlingly long interface name
4. Launch ifconfig, which will segfault

$ cat /proc/net/dev
Inter-|   Receive                                                |  Transmit
 face |bytes    packets errs drop fifo frame compressed multicast|bytes  
packets errs drop fifo colls carrier compressed
   lo:   20867     144    0    0    0     0          0         0    20867   144
   0    0    0     0       0          0
 sit0:       0       0    0    0    0     0          0         0        0      
0    8    0    0     0       0          0
 eth0:1131879891 69384427    0    0    0     0          0    215248 1731173134
47617994    0    0    0     0       0          0
 hsi0:2505966433 29320782    0    0    0     0          0        33 3428513831
29321259    0    0    0     0       0          0
hsi0.100:336494932 3726417    0    0    0     0          0        33 2169909805
25594924    0    0    0     0       0          0 

I am not the author of the patch.
It should be very easy to reproduce the crasher by creating a fake /proc/net/dev
file with data equivalent to the one above.

Comment 1 Bastien Nocera 2006-05-04 16:03:48 UTC
Created attachment 128614 [details]
net-tools-1.60-ifconfig-long-iface-crasher.patch

Comment 2 Bastien Nocera 2006-05-05 08:36:06 UTC
Comment on attachment 128614 [details]
net-tools-1.60-ifconfig-long-iface-crasher.patch

Patch from Sachin P Sant <ssant.com>

Comment 3 Radek Vokál 2006-05-09 09:34:41 UTC
Patch applied on rawhide for futher testing (net-tools-1.60-70)

Comment 4 RHEL Program Management 2006-08-18 16:00:39 UTC
This request was evaluated by Red Hat Product Management for inclusion in a Red
Hat Enterprise Linux maintenance release.  Product Management has requested
further review of this request by Red Hat Engineering, for potential
inclusion in a Red Hat Enterprise Linux Update release for currently deployed
products.  This request is not yet committed for inclusion in an Update
release.

Comment 10 Red Hat Bugzilla 2007-05-01 23:52:02 UTC
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on the solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHBA-2007-0241.html



Note You need to log in before you can comment on or make changes to this bug.