Bug 769857 - procinfo command gets buffer overflow for hms calculations
Summary: procinfo command gets buffer overflow for hms calculations
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 5
Classification: Red Hat
Component: procinfo
Version: 5.4
Hardware: All
OS: Linux
urgent
high
Target Milestone: rc
: ---
Assignee: Jaromír Cápík
QA Contact: BaseOS QE - Apps
URL:
Whiteboard:
Depends On: 676651
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-12-22 14:52 UTC by RHEL Program Management
Modified: 2018-11-26 18:08 UTC (History)
11 users (show)

Fixed In Version: procinfo-18-19.el5_7.1
Doc Type: Bug Fix
Doc Text:
Previously, the procinfo command calculated the system idle time in a way that caused arithmetic overflows. As a consequence, procinfo displayed the system idle time incorrectly, which eventually resulted in buffer overflows. With this update, procinfo has been modified to convert variables to a larger data type before they are used in the calculation so that procinfo now always displays the system idle time correctly. Buffer overflows no longer occur under these circumstances.
Clone Of:
Environment:
Last Closed: 2012-01-16 08:58:16 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2012:0021 0 normal SHIPPED_LIVE procinfo bug fix update 2012-01-16 12:52:02 UTC

Description RHEL Program Management 2011-12-22 14:52:43 UTC 
This bug has been copied from bug #676651 and has been proposed
to be backported to 5.7 z-stream (EUS).
Comment 5 Miroslav Svoboda 2012-01-04 17:50:55 UTC 
    Technical note added. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    New Contents:
Previously, the procinfo command calculated the system idle time in a way that caused arithmetic overflows. As a consequence, procinfo displayed the system idle time incorrectly, which eventually resulted in buffer overflows. With this update, procinfo has been modified to convert variables to a larger data type before they are used in the calculation so that procinfo now always displays the system idle time correctly. Buffer overflows no longer occur under these circumstances.
Comment 7 errata-xmlrpc 2012-01-16 08:58:16 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHBA-2012-0021.html
Note You need to log in before you can comment on or make changes to this bug.