Bug 232628 – source-highlight-2.10 - sandbox access violation

• Status: RESOLVED FIXED
• Product: Gentoo Linux

[Description Helmut Jarausch 2008-07-22 09:02:42 UTC]

emerging  source-highlight-2.10 fails with a sandbox violation:
--------------------------- ACCESS VIOLATION SUMMARY ---------------------------
LOG FILE = "/var/log/sandbox/sandbox-28754.log"

open_wr:   /usr/include/boost/regex.hpp


Reproducible: Always




6 # emerge --info
Portage 2.2_rc1 (default/linux/x86/2008.0, gcc-4.3.1, glibc-2.8_p20080602-r0, 2.6.26-gentoo i686)
=================================================================
System uname: Linux-2.6.26-gentoo-i686-Pentium_III_-Coppermine-with-glibc2.0
Timestamp of tree: Tue, 22 Jul 2008 07:15:01 +0000
ccache version 2.4 [disabled]
app-shells/bash:     3.2_p39
dev-java/java-config: 1.3.7, 2.1.6-r1
dev-lang/python:     2.5.2-r5
dev-python/pycrypto: 2.0.1-r6
dev-util/ccache:     2.4-r7
sys-apps/baselayout: 2.0.0
sys-apps/openrc:     0.2.5
sys-apps/sandbox:    1.2.18.1-r3
sys-devel/autoconf:  2.13, 2.62-r1
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10.1-r1
sys-devel/binutils:  2.18-r3
sys-devel/gcc-config: 1.4.0-r4
sys-devel/libtool:   2.2.4
virtual/os-headers:  2.6.25-r4
ACCEPT_KEYWORDS="x86 ~x86"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O2 -march=i686 -pipe"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/NX/etc /usr/NX/home /usr/kde/3.5/env /usr/kde/3.5/share/config /usr/kde/3.5/shutdown /usr/share/config /var/lib/hsqldb"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php5/ext-active/ /etc/php/cgi-php5/ext-active/ /etc/php/cli-php5/ext-active/ /etc/revdep-rebuild /etc/terminfo /etc/texmf/web2c /etc/udev/rules.d"
CXXFLAGS="-O2 -march=i686 -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="distlocks parallel-fetch preserve-libs sandbox sfperms strict unmerge-orphans userfetch"
GENTOO_MIRRORS="ftp://sunsite.informatik.rwth-aachen.de/pub/Linux/gentoo "
LDFLAGS="-Wl,-O1"
LINGUAS="en de"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage"
SYNC="rsync://rsync.informatik.RWTH-Aachen.de/gentoo-portage"
USE="X acl alsa atm berkdb bzip2 cairo cdr cli cracklib crypt cups doc dri dvd fortran gdbm gif gimp gnome gpm gtk iconv ipv6 isdnlog jpeg kde lcms midi mmx mudflap ncurses nls nptl nptlonly opengl openmp pam pcre pdf perl png pppd python qt qt4 readline reflection session spl sqlite sqlite3 sse ssl svg tcl tcpd tetex tiff tk unicode x86 xorg xulrunner zlib" ALSA_CARDS="ens1371" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" ELIBC="glibc" INPUT_DEVICES="keyboard mouse wacom" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="en de" USERLAND="GNU" VIDEO_CARDS="nv"
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS

[Comment 1 Tiziano Müller (RETIRED) 2008-07-22 16:10:05 UTC]

em, what??? I really wonder how does that happen since everything built ok here.


Can you please attach:
- the complete build log
- used boost version

[Comment 2 Helmut Jarausch 2008-07-22 18:41:17 UTC]

Created attachment 161119 [details]
build log for dev-util/source-highlight

[Comment 3 Helmut Jarausch 2008-07-22 18:42:47 UTC]

(In reply to comment #1)
> em, what??? I really wonder how does that happen since everything built ok
> here.
> 
> 
> Can you please attach:
> - the complete build log
> - used boost version
dev-libs/boost and dev-util/boost-build  1.35.0-r1  each
> 

[Comment 4 Tiziano Müller (RETIRED) 2008-07-22 20:26:22 UTC]

ok, I need some more things, sorry:
i) please make sure that /usr/include/boost/regex.hpp does not have the modification date in the future (maybe touch is as root)
ii) please tell me which ctags version you're using because your build log shows that source-highlight couldn't detect it (which is kind of weird)

[Comment 5 Helmut Jarausch 2008-07-23 13:41:28 UTC]

(In reply to comment #4)
> ok, I need some more things, sorry:
> i) please make sure that /usr/include/boost/regex.hpp does not have the
> modification date in the future (maybe touch is as root)
> ii) please tell me which ctags version you're using because your build log
> shows that source-highlight couldn't detect it (which is kind of weird)
> 

I cannot explain it but I've tried to emerge it again today and now
it succeeds. I have only emerged portage (2.22_rc2 instead of 2.22_rc1)
and sys-auth/pambase in between.
When I checked the file date of /usr/include/boost/regex.hpp it showed
some time yesterday although dev-libs/boost has been emerged in June.

Thanks for looking into it,
Helmut.

[Comment 6 Reto Gantenbein (ganto) 2009-07-13 10:05:52 UTC]

I also encountered this error today when merging source-highlight-2.9 (stable)

I have boost-1.35.0-r2 (stable)

The error happens when it wants to touch /usr/include/boost/regex.hpp. It already exists!

Here the log:

[...]
touch /usr/include/boost/regex.hpp
ACCESS DENIED  open_wr:      /usr/include/boost/regex.hpp
ACCESS DENIED  utimensat:    /usr/include/boost/regex.hpp
touch: cannot touch `/usr/include/boost/regex.hpp': Permission denied
make[3]: *** [/usr/include/boost/regex.hpp] Error 1
make[3]: *** Waiting for unfinished jobs....
make[3]: Leaving directory `/tmp/var-tmp/portage/dev-util/source-highlight-2.9/work/source-highlight-2.9/src/lib'
make[2]: *** [install] Error 2
make[2]: Leaving directory `/tmp/var-tmp/portage/dev-util/source-highlight-2.9/work/source-highlight-2.9/src/lib'
make[1]: *** [install-recursive] Error 1
make[1]: Leaving directory `/tmp/var-tmp/portage/dev-util/source-highlight-2.9/work/source-highlight-2.9/src'
make: *** [install-recursive] Error 1
 * 
 * ERROR: dev-util/source-highlight-2.9 failed.
 * Call stack:
 *               ebuild.sh, line   49:  Called src_install
 *             environment, line  208:  Called die
 * The specific snippet of code:
 *       emake DESTDIR="${D}" install || die "make install failed";
 *  The die message:
 *   make install failed
 * 
 * If you need support, post the topmost build error, and the call stack if relevant.
 * A complete build log is located at '/tmp/var-tmp/portage/dev-util/source-highlight-2.9/temp/build.log'.
 * The ebuild environment file is located at '/tmp/var-tmp/portage/dev-util/source-highlight-2.9/temp/environment'.
 * 
--------------------------- ACCESS VIOLATION SUMMARY ---------------------------
LOG FILE "/var/log/sandbox/sandbox-29654.log"

VERSION 1.0
FORMAT: F - Function called
FORMAT: S - Access Status
FORMAT: P - Path as passed to function
FORMAT: A - Absolute Path (not canonical)
FORMAT: R - Canonical Path
FORMAT: C - Command Line

F: open_wr
S: deny
P: /usr/include/boost/regex.hpp
A: /usr/include/boost/regex.hpp
R: /usr/include/boost/regex.hpp
C: touch /usr/include/boost/regex.hpp 

F: utimensat
S: deny
P: /usr/include/boost/regex.hpp
A: /usr/include/boost/regex.hpp
R: /usr/include/boost/regex.hpp
C: touch /usr/include/boost/regex.hpp 
--------------------------------------------------------------------------------

[Comment 7 Reto Gantenbein (ganto) 2009-07-13 10:07:46 UTC]

Created attachment 197766 [details]
dev-util/source-highlight build.log with sandbox violation

[Comment 8 Reto Gantenbein (ganto) 2009-07-13 10:09:27 UTC]

Here my `emerge --info`:

Portage 2.1.6.13 (default/linux/amd64/2008.0, gcc-4.3.2, glibc-2.9_p20081201-r2, 2.6.30-gentoo-r2 x86_64)
=================================================================
System uname: Linux-2.6.30-gentoo-r2-x86_64-Dual_Core_AMD_Opteron-tm-_Processor_165-with-glibc2.2.5
Timestamp of tree: Mon, 13 Jul 2009 09:15:02 +0000
ccache version 2.4 [disabled]
app-shells/bash:     3.2_p39
dev-java/java-config: 2.1.8-r1
dev-lang/python:     2.5.4-r3
dev-python/pycrypto: 2.0.1-r8
dev-util/ccache:     2.4-r7
dev-util/cmake:      2.6.4
sys-apps/baselayout: 2.0.0
sys-apps/openrc:     0.4.3-r2
sys-apps/sandbox:    1.6-r2
sys-devel/autoconf:  2.13, 2.63
sys-devel/automake:  1.5, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10.2
sys-devel/binutils:  2.18-r3
sys-devel/gcc-config: 1.4.1
sys-devel/libtool:   2.2.4
virtual/os-headers:  2.6.30
ACCEPT_KEYWORDS="amd64"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-march=opteron -O2 -pipe"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php5/ext-active/ /etc/php/cgi-php5/ext-active/ /etc/php/cli-php5/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c /etc/udev/rules.d"
CXXFLAGS="-march=opteron -O2 -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="distlocks fixpackages parallel-fetch protect-owned sandbox sfperms strict unmerge-orphans userfetch userpriv usersandbox"
GENTOO_MIRRORS="ftp://linux.rz.ruhr-uni-bochum.de/gentoo-mirror/ ftp://ftp-stud.fht-esslingen.de/pub/Mirrors/gentoo/ ftp://ftp.snt.utwente.nl/pub/os/linux/gentoo ftp://gentoo.inf.elte.hu/ ftp://ftp.free.fr/mirrors/ftp.gentoo.org/"
LANG="en_US"
LDFLAGS="-Wl,-O1"
LINGUAS="en"
MAKEOPTS="-j4"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage/ganto /usr/local/portage/ubelix"
SYNC="rsync://rsync.europe.gentoo.org/gentoo-portage"
USE="3dnow 3dnowext X X509 a52 aac aalib acpi alsa amd64 amr applet async audio automount avahi bash-completion berkdb binfilter branding bzip2 cairo capi caps ccache cdaudio cdda cddb cdio cdparanoia cdr cdrkit cjk cli console consolekit cracklib crypt css cups custom-optimization daap dbus device-mapper dga dia discouraged disk-partition diskio divx dmi dri dv dvd dvi eds emerald enca encode exif expat fam fasttrack fat fbcon ffmpeg flac fontconfig fortran ftp fuse gaim galago gcj gd gdbm gedit geoip gif gimp gimpprint glib glitz glsa glut gmp gnome gnome-keyring gnome-print gnutella gnutls gphoto2 gpm graphviz gs gsf gstreamer gtk hal hddtemp hfs iconv icu id3tag idn ieee1394 imagemagick inherit-graph inkjar ipod isdnlog jpeg kate keyring kqemu lame lcms libass libnotify libsamplerate libsexy live lm_sensors logrotate lvm lzma lzo magic matroska mdnsresponder-compat midi mjpeg mmap mmx mmxext modules mono mp2 mp3 mpeg mplayer mtp mudflap multilib musepack musicbrainz nautilus ncurses network nfs nls nntp nolvm1 nolvmstatic nptl nptlonly nsplugin ntfs nvidia ofx ogg opengl openmp pam parted pcntl pcre pdf perl plotutils png podcast postscript ppds pppd prediction print pulseaudio python qemu quicktime rar rdesktop readline reflection resolvconf rtc rtsp sasl scrobbler sdl session shout smi smp soundtouch soup sourceview spell spl sse sse2 ssl stream subtitles subversion svg sysfs taglib tagwriting tcpd tga theora threads threadsonly tiff tk totem tracker truetype unicode utils v4l valgrind vcd video vim-syntax vnc vorbis wma wmf wxwindows x264 xanim xattr xcb xcomposite xfs xinerama xml xmldoclet xmp xorg xosd xulrunner xv xvid xvmc zeroconf zlib" ALSA_CARDS="intel8x0 emu10k1x" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" ELIBC="glibc" INPUT_DEVICES="evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="en" USERLAND="GNU" VIDEO_CARDS="nvidia vesa"
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, FFLAGS, INSTALL_MASK, LC_ALL, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS

[Comment 9 Thomas Capricelli 2009-10-12 13:59:22 UTC]

i'm hit by this bug today, with dev-util/source-highlight-2.9. dev-libs/boost-1.35.0-r2 is already installed. I'm using amd64 stable... is it really fixed/resolved ???

[Comment 10 Thomas Capricelli 2009-10-12 14:13:29 UTC]

for info, fixed by using the ~amd64 version

[Comment 11 Jens Pranaitis 2009-11-18 14:28:35 UTC]

I was also hit by this bug. Stable hardened amd64 version source-hilight-2.9. I fixed it by removing the touch command from the Makefile:

--- src/lib/Makefile    2009-11-18 15:11:59.000000000 +0100
+++ src/lib/Makefile    2009-11-18 15:12:12.000000000 +0100
@@ -853,7 +832,7 @@
        $(TXTC) -c $<

 .h.hpp:
-       touch $@
+
 #.h.hpp:
 #      $(DOUBLECPP) --output-source-ext cc --invade-target --input-header-ext h --output-header-ext hpp --output-source-suff=_dbtab --verbose --assume-virtual -i $<
 #      touch $@