Red Hat Bugzilla – Bug 89448
getaddrinfo segv - unitialized structure?
Last modified: 2007-04-18 12:53:14 EDT
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.0.1) Gecko/20021003
Description of problem:
From: Jim Garlick <firstname.lastname@example.org>
Subject: powerman bug, not.
Date: Mon, 21 Apr 2003 11:47:19 -0700 (PDT)
Hey Andrew, I think I found that powerman bug on toad. It actually looks like
a bug in getaddrinfo where maybe it is using some stack storage uninitialized
and expecting it to be zeroed. I found in powerman that zeroing 330 bytes of
stack before calling getaddrinfo made the core dumps go away, and that a test
program (below) that only calls getaddrinfo could be made to core dump by
setting 330 bytes of stack to 0xff before calling getaddrinfo. I didn't take
it any further than that (e.g. finding the specific bug in getaddrinfo)
because this was enough to convince me it was not a powerman problem.
This only reproduces on RedHat 9, not 7.3. The specific glibc on RedHat 9
that seems broken is glibc-2.3.2-27.9. Ben could you report this?
static void _dirty_stack(void)
char _dummy; /* 320 nope, 330 yes */
for (i = 0; i < (sizeof(_dummy)/sizeof(_dummy)); i++)
_dummy[i] = 0xff;
int main(int argc, char *argv)
struct addrinfo hints, *ai;
memset(&hints, 0, sizeof(struct addrinfo));
hints.ai_flags = AI_CANONNAME;
hints.ai_family = AF_INET;
hints.ai_socktype = SOCK_STREAM;
res = getaddrinfo("localhost", "telnet", &hints, &ai);
printf("result: %s\n", res == 0 ? "success" : gai_strerror(res));
if (res == 0)
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1. run the test program above
Actual Results: it crashes
Expected Results: it works
Created attachment 91234 [details]
test program that illustrates the problem
This is just an attached version of the file from above.
Should be fixed in http://sources.redhat.com/ml/libc-hacker/2003-04/msg00059.html.
Fixed in the official glibc version, will be in the next glibc RPM.
Try the test release of the RHL9 errata at