184962 2007-07-11 15:20 0000 app-forensics/chkrootkit-0.47 crashes with segmentation fault due to a missing blank in the script 2008-10-06 20:01:31 0000 1 1 1 Unclassified Gentoo Linux Applications unspecified x86 Linux RESOLVED FIXED P2 normal --- 1 f_c@everymail.net forensics@gentoo.org hyakuhei@gentoo.org pva@gentoo.org sggentoo@gethos.net f_c@everymail.net 2007-07-11 15:20:54 0000 in /usr/sbin/chkrootkit (version 0.47) in line 181, a blank is missing in the line "chkutmp()" (should be: "chkutmp ()"). when the interpreter reaches that line, a segmentation fault occurs. adding the missing blank fixes the problem. Reproducible: Always Steps to Reproduce: 1. # emerge =app-forensics/chkrootkit-0.47 2. # chkrootkit jakub@gentoo.org 2007-10-20 08:01:16 0000 *** Bug 196493 has been marked as a duplicate of this bug. *** hypnos75@gmail.com 2007-10-20 18:16:54 0000 (In reply to comment #1) > *** Bug 196493 has been marked as a duplicate of this bug. *** > The duplicate bug contains a patch that fixes the problem. Something in the code trips a bug with the -O2 gcc optimization flag. pva@gentoo.org 2008-10-06 19:45:23 0000 Created an attachment (id=167487) chkrootkit-0.48-some-overruns-fixes.patch Better show changes as a patch - easier to review. And, please, attach changes to bugzilla - then we do not loose them. BTW, could somebody provide test case as this crash is not reproducible on my system? pva@gentoo.org 2008-10-06 20:01:31 0000 Although I failed to reproduce the issue, patch seems to be correct. Applied. Reopen bug if problem is still reproducible in >=chkrootkit-0.48-r1 and attach wtmp files so I could reproduce crash too. Thanks you bazbar for report and Sourav Mandal for the fix. 167487 2008-10-06 19:45 0000 chkrootkit-0.48-some-overruns-fixes.patch chkrootkit-0.48-some-overruns-fixes.patch text/plain PT09IG1vZGlmaWVkIGZpbGUgJ2Noa3V0bXAuYycKLS0tIGNoa3V0bXAuYwkyMDA4LTEwLTA2IDE5 OjA3OjUxICswMDAwCisrKyBjaGt1dG1wLmMJMjAwNy0xMC0yMCAwNzo1NjoxOSArMDAwMApAQCAt MjMsNiArMjMsNyBAQAogICoKICAqICBDaGFuZ2Vsb2c6IAogICogICBJZ2hpZ2hpIFggLSBJbXBy b3ZlZCBzcGVlZCB2aWEgYnJlYWsgY29tbWFuZCAtIDIwMDUvMDMvMjcgCisgKiAgIFN0ZXdhcnQg R2ViYmllIC0gZml4ZWQgYnVmZmVyIG92ZXJydW4gYnVnIHJlbGF0ZWQgdG8gTUFYUkVBRCBhbmQg VVRfUElETEVOR1RIIC0gMjAwNy0xMC0yMAogICogIAogICovCiAKQEAgLTQyLDcgKzQzLDcgQEAK ICNlbmRpZgogI2luY2x1ZGUgPGN0eXBlLmg+CiAKLSNkZWZpbmUgTUFYUkVBRCAxMDI0CisjZGVm aW5lIE1BWFJFQUQgNDA5NgogI2RlZmluZSBNQVhCVUYgNDA5NgogI2RlZmluZSBNQVhMRU5HVEgg MjU2CiAjZGVmaW5lIFVUX1BJRFNJWkUgMTIKQEAgLTU3LDEzICs1OCwxMyBAQAogI2VuZGlmCiAK IHN0cnVjdCBwc19saW5lIHsKLSAgICBjaGFyIHBzX3R0eVtVVF9MSU5FU0laRV07Ci0gICAgY2hh ciBwc191c2VyW1VUX05BTUVTSVpFXTsKLSAgICBjaGFyIHBzX2FyZ3NbTUFYTEVOR1RIXTsKKyAg ICBjaGFyIHBzX3R0eVtVVF9MSU5FU0laRSsxXTsKKyAgICBjaGFyIHBzX3VzZXJbVVRfTkFNRVNJ WkUrMV07CisgICAgY2hhciBwc19hcmdzW01BWExFTkdUSCsxXTsKICAgICBpbnQgcHNfcGlkOwog fTsKIHN0cnVjdCB1dG1wX2xpbmUgewotICAgIGNoYXIgdXRfdHR5W1VUX0xJTkVTSVpFXTsKKyAg ICBjaGFyIHV0X3R0eVtVVF9MSU5FU0laRSsxXTsKICAgICBpbnQgdXRfcGlkOwogICAgIGludCB1 dF90eXBlOwogfTsKQEAgLTc3LDcgKzc4LDcgQEAKIGludCBmZXRjaHBzKHN0cnVjdCBwc19saW5l ICpwc2xfcCkKIHsKICAgICBGSUxFICpwc19mcDsKLSAgICBjaGFyIGxpbmVbTUFYUkVBRCArIDFd LCBwaWRbVVRfUElEU0laRV07CisgICAgY2hhciBsaW5lW01BWFJFQUQgKyAxXSwgcGlkW1VUX1BJ RFNJWkUrMV07CiAgICAgY2hhciAqcywgKmQ7CiAgICAgc3RydWN0IHBzX2xpbmUgKmN1cnAgPSAm cHNsX3BbMF07CiAgICAgc3RydWN0IHBzX2xpbmUgKmVuZHAgPSAmcHNsX3BbTUFYQlVGXTsKQEAg LTk3LDcgKzk4LDcgQEAKIAkJd2hpbGUgKGlzc3BhY2UoKnMpKQkvKiBza2lwIHNwYWNlcyAqLwog CQkgICAgcysrOwogCQlkID0gcGlkOwotCQlmb3IgKHggPSAwOyAoIWlzc3BhY2UoKnMpKSAmJiAo KmQrKyA9ICpzKyspICYmIHggPD0gVVRfTElORVNJWkU7IHgrKykJLyogZ3JhYiBwaWQgKi8KKwkJ Zm9yICh4ID0gMDsgKCFpc3NwYWNlKCpzKSkgJiYgKCpkKysgPSAqcysrKSAmJiB4IDw9IFVUX1BJ RFNJWkU7IHgrKykJLyogZ3JhYiBwaWQgKi8KIAkJICAgIDsKIAkJKmQgPSAnXDAnOwogCQljdXJw LT5wc19waWQgPSBhdG9pKHBpZCk7Cgo=