Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 182087 - stack smashing attack in kdesktop
Summary: stack smashing attack in kdesktop
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Hardened (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: The Gentoo Linux Hardened Team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks: 135265
  Show dependency tree
 
Reported: 2007-06-15 03:46 UTC by Joseph Turian
Modified: 2007-11-10 09:26 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---

Attachments
log of startx (startx.log,5.03 KB, text/plain)
2007-06-15 03:46 UTC, Joseph Turian 		Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Joseph Turian 2007-06-15 03:46:20 UTC 
kdesktop and artsmessage crash under hardened gentoo.

I will be attaching a log of what happens when I invoke 'startx'
I have gcc-3.4.6-r2 and kdebase-3.5.5-r2 (Is this the relevant ebuild)

This may be related to Bug #126896 http://bugs.gentoo.org/show_bug.cgi?id=126896

Reproducible: Always

Steps to Reproduce:
1. Compile KDE under hardened gentoo as above
2. startx


Actual Results:  
blank screen after KDE startup window

Expected Results:  
kde desktop appears after KDE startup window
Comment 1 Joseph Turian 2007-06-15 03:46:48 UTC 
Created attachment 122100 [details]
log of startx
Comment 2 Christian Heim (RETIRED) gentoo-dev 2007-06-15 15:57:48 UTC 
More C++/SSP stuff ...
Comment 3 Joseph Turian 2007-06-18 20:09:45 UTC 
Okay. So is there a workaround? One that doesn't involve compiling KDE un-hardened, I mean?
Comment 4 Joseph Turian 2007-06-22 19:22:29 UTC 
NB recompiling qt-3.3.8-r2 with the hardened-nossp works, but is unsatisfactory (I don't want to have nossp packages).
I think this is a TrollTech bug, but am not sure:
http://www.mail-archive.com/gentoo-amd64@lists.gentoo.org/msg04539.html
Comment 5 Christian Heim (RETIRED) gentoo-dev 2007-11-10 09:26:32 UTC 
Due to SSP having issues with C++ code, I just placed a -fno-stack-protector in the x11-libs/qt ebuilds. Thus, you should no longer see those issues when emerging anything qt-based or QT itself.