Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 187241 - sys-apps/findutils-4.3.8: find -ls couses stacksmash
Summary: sys-apps/findutils-4.3.8: find -ls couses stacksmash
Status: RESOLVED DUPLICATE of bug 188249
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Hardened (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: The Gentoo Linux Hardened Team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2007-07-31 11:55 UTC by Xake
Modified: 2007-08-26 13:14 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Xake 2007-07-31 11:55:36 UTC
/ $ find -ls
     2    8 drwxr-xr-x  22 root     root         4096 Jul 28 13:38 .
*** stack smashing detected ***: find - terminated
find: stack smashing attack in function <unknown> - terminated
Report to http://bugs.gentoo.org/
Killed

This happends in any folder.

I am using latest version of kevquinns gcc-4 pieworld overlay.
I have not the possibility to test agains gcc-3.
Anything more, just ask.

$ emerge --info
Portage 2.1.2.2 (selinux/2007.0/x86/hardened, gcc-4.1.2, glibc-2.6-r0, 2.6.21-hardened-r3 i686)
=================================================================
System uname: 2.6.21-hardened-r3 i686 Pentium III (Coppermine)
Gentoo Base System release 1.12.10
Timestamp of tree: Mon, 30 Jul 2007 21:50:01 +0000
distcc 2.18.3 i686-pc-linux-gnu (protocols 1 and 2) (default port 3632) [disabled]
dev-lang/python:     2.4.4-r4
dev-python/pycrypto: 2.0.1-r6
sys-apps/sandbox:    1.2.18.1
sys-devel/autoconf:  2.13, 2.61-r1
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10
sys-devel/binutils:  2.17.50.0.16
sys-devel/gcc-config: 1.3.16
sys-devel/libtool:   1.5.24
virtual/os-headers:  2.6.22-r2
ACCEPT_KEYWORDS="x86 ~x86"
AUTOCLEAN="yes"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O2 -march=pentium3 -pipe -fomit-frame-pointer"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /opt/glftpd/etc /opt/glftpd/ftp-data /usr/lib/fax /var/spool/fax/etc"
CONFIG_PROTECT_MASK="/etc/env.d /etc/gconf /etc/php/apache2-php5/ext-active/ /etc/php/cgi-php5/ext-active/ /etc/php/cli-php5/ext-active/ /etc/revdep-rebuild /etc/terminfo"
CXXFLAGS="-O2 -march=pentium3 -pipe -fomit-frame-pointer"
DISTDIR="/usr/portage/distfiles"
FEATURES="distlocks loadpolicy parallel-fetch sandbox selinux sesandbox sfperms strict test userpriv"
GENTOO_MIRRORS="http://distfiles.gentoo.org http://distro.ibiblio.org/pub/linux/distributions/gentoo"
LDFLAGS="-Wl,-O1 -Wl,--as-needed -Wl,--hash-style=gnu"
MAKEOPTS="-j3"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --delete-after --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --filter=H_**/files/digest-*"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/overlays/portage /usr/local/overlays/pieworld /usr/portage/local/layman/webapps-experimental"
SYNC="rsync://rsync.europe.gentoo.org/gentoo-portage"
USE="apache2 bash-completion berkdb bitmap-fonts bzip2 cli cracklib crypt cups curl dri fam fortran gdbm gmp gpm hardened hpn iconv ipv6 isdnlog jpeg keyutils libg++ logrotate midi mudflap mysql ncurses network-cron nls nonfsv4 nptl nptlonly offensive openmp pam parport pcre perl pic png pppd python readline reflection selinux sensord serial session slang spl srvdir ssl syslog tcpd test tiff truetype-fonts type1-fonts unicode unzip x86 xattr xinetd xorg zip zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1 emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mulaw multi null plug rate route share shm softvol" ELIBC="glibc" INPUT_DEVICES="keyboard mouse" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" USERLAND="GNU" VIDEO_CARDS="none"
Unset:  CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL, LINGUAS, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS
Comment 1 SpanKY gentoo-dev 2007-08-25 15:09:07 UTC
see if this patch fixes things:
http://bugs.gentoo.org/attachment.cgi?id=127395
Comment 2 Xake 2007-08-25 15:32:03 UTC
Yes, that patch did the trick.
Comment 3 Xake 2007-08-26 12:54:50 UTC
Seems to be fixed in sys-apps/findutils-4.3.8-r1
Thanks!
Comment 4 SpanKY gentoo-dev 2007-08-26 13:13:50 UTC
which makes this a dupe ...
Comment 5 SpanKY gentoo-dev 2007-08-26 13:14:04 UTC

*** This bug has been marked as a duplicate of bug 188249 ***