when I run chkrootkit i get Checking `chkutmp'... /usr/sbin/chkrootkit: line 181: 16800 Segmentation fault ${CHKUTMP} I failed to reproduce the bug with gdb, however the bug only manifests when chkutmp is compiled with -O2, -O3 or -Os Portage 2.1.2_pre1-r1 (default-linux/x86/2006.1/desktop, gcc-4.1.1/vanilla, glibc-2.4-r3, 2.6.18-mm1 i686) ================================================================= System uname: 2.6.18-mm1 i686 mobile AMD Athlon(tm) XP 2600+ Gentoo Base System version 1.12.5 Last Sync: Sun, 24 Sep 2006 10:50:01 +0000 app-admin/eselect-compiler: 2.0.0_rc2-r1 dev-java/java-config: 1.3.7, 2.0.30 dev-lang/python: 2.3.5-r2, 2.4.3-r3 dev-python/pycrypto: 2.0.1-r5 dev-util/ccache: [Not Present] dev-util/confcache: [Not Present] sys-apps/sandbox: 1.2.18.1 sys-devel/autoconf: 2.13, 2.60 sys-devel/automake: 1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2 sys-devel/binutils: 2.16.1-r2, 2.17 sys-devel/gcc-config: 1.3.13-r3 sys-devel/libtool: 1.5.22 virtual/os-headers: 2.6.17-r1 ACCEPT_KEYWORDS="x86 ~x86" AUTOCLEAN="yes" CBUILD="i686-pc-linux-gnu" CFLAGS="-O2 -march=athlon-xp -fomit-frame-pointer -pipe" CHOST="i686-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/kde/3.5/env /usr/kde/3.5/share/config /usr/kde/3.5/shutdown /usr/share/X11/xkb /usr/share/config" CONFIG_PROTECT_MASK="/etc/env.d /etc/env.d/java/ /etc/eselect/compiler /etc/gconf /etc/java-config/vms/ /etc/revdep-rebuild /etc/terminfo /etc/texmf/web2c" CXXFLAGS="-O2 -march=athlon-xp -fomit-frame-pointer -pipe" DISTDIR="/usr/portage/distfiles" FEATURES="autoconfig distlocks metadata-transfer parallel-fetch sandbox sfperms strict" GENTOO_MIRRORS="http://trumpetti.atm.tut.fi/gentoo/ ftp://trumpetti.atm.tut.fi/gentoo/ http://ftp.linux.ee/pub/gentoo/distfiles/ ftp://ftp.linux.ee/pub/gentoo/distfiles/ ftp://ftp.du.se/pub/os/gentoo http://ftp.du.se/pub/os/gentoo http://ds.thn.htu.se/linux/gentoo" LANG="en_US.utf8" MAKEOPTS="-j2" PKGDIR="/usr/portage/packages" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --delete-after --stats --timeout=180 --exclude='/distfiles' --exclude='/local' --exclude='/packages'" PORTAGE_TMPDIR="/usr/local/tmp/" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/usr/local/portage/omat /usr/portage/local/layman/sunrise" SYNC="rsync://trumpetti.atm.tut.fi/gentoo-portage" USE="x86 3dnow 3dnowext 7zip X a52 aac acpi alsa ansi asf bash-completion berkdb bitmap-fonts boundschecking browserplugin bzip2 bzlib c++ cairo cdda cdr cdrom codecs corba crypt css curl dbcp dbus dhcp directfb divx4linux dlloader dri dvd dvdr dvdread eds elibc_glibc emboss encode escreen fam fbcon fbdev ffmpeg firefox flac flood fortran freetype gd gdb gif gimp glibc glut glx gmedia gnuplot gpm graphviz gstreamer gtk hal http iconv idn ieee1394 imagemagick input_devices_evdev input_devices_keyboard input_devices_mouse ipv6 java javascript jpeg jpeg2k kdeenablefinal kdehiddenvisibility kernel_linux latex lcd lcms ldap libg++ lm_sensors logrotate lua lzo matroska md5sum mime mmx mmxext mng mod mozsvg mp3 mpeg mpeg2 mpeg4 mplayer multitarget ncurses no-old-linux no-opts no-suexec nocd nptl nptlonly nsplugin objc octave ogg opengl openssh openssl pam pango pdf perforce perl png ppds print python qt4 quicktime readline real realmedia reiser4 samba scp screen sdl sensord shout skins snmp speex sse ssl subversion svg symlink sysfs tcltk tcp tetex text theora threads tiff transcode truetype truetype-fonts type1-fonts udev unicode urandom usb userland_GNU userlocales utf8 v4l vcd video_cards_ati video_cards_radeon vorbis win32codecs wma wma123 wmp wxwindows xft xgetdefault xml xml2 xorg xosd xv xvid xvmc zip zlib" Unset: CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LC_ALL, LDFLAGS, LINGUAS, PORTAGE_RSYNC_EXTRA_OPTS
Created attachment 98100 [details] valgrind -v output
obviously I did not mention that the version in question is app-forensics/chkrootkit-0.46a
Recompiling glibc fixed the problem. Seems that I did not recompile glibc with the new linux-headers :-(
