when i try to play a vcd using vcdx:// in vlc media player, it gets killed by grsec: VLC media player 0.8.6c Janus [00000253] vcdx access error: file iso9660_fs.c: line 1382 (find_fs_lsn_recurse): assertion failed: (entlist != NULL) [00000253] vcdx access error: file ds.c: line 160 (_cdio_list_begin): assertion failed: (p_list != NULL) Segmentation fault (in my logs:) grsec: denied resource overstep by requesting 4096 for RLIMIT_CORE against limit 0 for /usr/bin/vlc[vlc:18727] uid/euid:1000/1000 gid/egid:100/100, parent /bin/bash[bash:6257] uid/euid:1000/1000 gid/egid:100/100 VLC apparently has two vcd playback options, nominally vcd (which works) and vcdx (which segfaults). When the vcd use flag is enabled, both of these options are configured by the ebuild. Here's some info: --enable-vcdx VCD with navigation via libvcdinfo (default disabled) On my system, /usr/lib/libvcdinfo.so is provided by the media-video/vcdimager application. Automatically including vcdx when the vcd use flag is enabled is a problem because: when starting a wxWindows enabled vlc client (most desktop users of vlc), upon selecting File -> Open Disc -> select VCD, the default protocol is vcdx://. I propose that we either create a new use flag for vcdx (which is supposed to be some kind of menu navigation for vcds which I have personally never seen), or just not configure it when the vcd use flag is set. Alternatively, we could have the hardened profile use a different ebuild of vlc that just doesn't include the broken code. Reproducible: Always
I've split the useflags in the new snapshot, is this a hardened issue or does this happen also with non hardened kernels ?
considering that one as fixed since the useflag are now split
