Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 256539 - app-arch/xarchiver 0.5.2: Stack smashing detected
Summary: app-arch/xarchiver 0.5.2: Stack smashing detected
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: XFCE Team
URL: http://bugzilla.xfce.org/show_bug.cgi...
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2009-01-27 18:27 UTC by Fredric Johansson
Modified: 2009-02-09 19:34 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments
patch against 0.5.2 (xarchiver-stack-smash.patch,581 bytes, patch)
2009-01-27 18:30 UTC, Fredric Johansson
Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Fredric Johansson 2009-01-27 18:27:51 UTC
~ $ xarchiver 
*** stack smashing detected ***: xarchiver - terminated
xarchiver: stack smashing attack in function <unknown> - terminated
Report to http://bugs.gentoo.org/
Avbruten (SIGABRT) (core dumped)

A debugging session in gdb shows that the problem lies in
xa_set_statusbar_message_for_displayed_rows and xa_row_selected

To reproduce:
Load an archive or select a file/dir in the right panel


note: this is with gcc-4 from xake-overlay

emerge --info:
Portage 2.2_rc23 (hardened/x86/2.6, gcc-4.3.2, glibc-2.8_p20080602-r1, 2.6.27-hardened-r4 i686)
=================================================================
System uname: Linux-2.6.27-hardened-r4-i686-Intel-R-_Pentium-R-_4_CPU_3.00GHz-with-glibc2.0
Timestamp of tree: Sat, 24 Jan 2009 20:10:01 +0000
ccache version 2.4 [enabled]
app-shells/bash:     3.2_p39
dev-java/java-config: 1.3.7-r1, 2.1.6-r1
dev-lang/python:     2.5.2-r7
dev-util/ccache:     2.4-r7
dev-util/cmake:      2.4.8
sys-apps/baselayout: 1.12.11.1
sys-apps/sandbox:    1.2.18.1-r2
sys-devel/autoconf:  2.13, 2.63
sys-devel/automake:  1.4_p6, 1.5, 1.8.5-r3, 1.9.6-r2, 1.10.2
sys-devel/binutils:  2.19
sys-devel/gcc-config: 1.4.0-r4
sys-devel/libtool:   1.5.26
virtual/os-headers:  2.6.27-r2
ACCEPT_KEYWORDS="x86"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O2 -march=pentium4 -pipe -ggdb"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/revdep-rebuild /etc/splash /etc/terminfo /etc/udev/rules.d"
CXXFLAGS="-O2 -march=pentium4 -pipe -ggdb"
DISTDIR="/usr/portage/distfiles"
FEATURES="ccache distlocks fixpackages metadata-transfer parallel-fetch preserve-libs protect-owned sandbox sfperms splitdebug strict unmerge-orphans userfetch"
GENTOO_MIRRORS="http://distfiles.gentoo.org http://distro.ibiblio.org/pub/linux/distributions/gentoo"
LANG="sv_SE"
LC_ALL="sv_SE"
LDFLAGS="-Wl,-O1,--hash-style=gnu,--sort-common,--as-needed"
LINGUAS="sv en"
MAKEOPTS="-j3"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/portage/local/layman/desktop-effects /usr/local/portage /usr/local/portage-overlay/toolchain-overlay"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="X a52 aac aalib acpi alsa amr berkdb bzip2 cairo cracklib crypt cups curl dbus directfb dri dts dvb dvd dvdread encode ffmpeg flac gdbm gif glut gstreamer gtk hal hardened iconv idea ithreads java jpeg ldap midi mmx mng mp3 mpeg ncurses nls nptl nptlonly ogg openal opengl openmp pam pcre pdf pic png python readline sdl speex spell sse sse2 ssl startup-notification svg svga tcl tcpd tga theora threads tiff tk truetype unicode urandom v4l v4l2 vorbis win32codecs wxwindows x264 x86 xcb xcomposite xml xorg zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1 	emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m 	maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" ELIBC="glibc" INPUT_DEVICES="mouse keyboard evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="sv en" USERLAND="GNU" VIDEO_CARDS="radeon vesa"
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, FFLAGS, INSTALL_MASK, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS
Comment 1 Fredric Johansson 2009-01-27 18:30:03 UTC
Created attachment 179897 [details, diff]
patch against 0.5.2

The patch changes the type of size in both functions
Comment 2 Fredric Johansson 2009-01-27 18:31:37 UTC
Upstream bugreport:
http://bugzilla.xfce.org/show_bug.cgi?id=4865
Comment 3 Jeremy Olexa (darkside) (RETIRED) archtester gentoo-dev Security 2009-02-02 04:42:46 UTC
(In reply to comment #2)
> Upstream bugreport:
> http://bugzilla.xfce.org/show_bug.cgi?id=4865
> 

Thanks, I see it has been applied upstream already. We will try to find out when they plan on making the next release and decide how to proceed.
Comment 4 Christoph Mende (RETIRED) gentoo-dev 2009-02-09 19:34:50 UTC
I've applied your patch for now, thanks