Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 257418 - net-print/foomatic-db-engine-3.0.20080507 access violations w/ sandbox-1.3.3 with /dev/fd/3 access
Summary: net-print/foomatic-db-engine-3.0.20080507 access violations w/ sandbox-1.3.3 ...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: Sandbox Maintainers
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2009-02-02 19:21 UTC by Ryan Hill (RETIRED)
Modified: 2009-02-08 02:54 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Ryan Hill (RETIRED) gentoo-dev 2009-02-02 19:21:13 UTC
configure tries to open &3, sandbox says "nuh uh".
CCing sandbox for the funky traceback.


checking for a2ps... A2PS_NOT_FOUND                                                                                                         
checking for wget... /usr/bin/wget                                                                                                          
checking for curl... /usr/bin/curl                                                                                                          
checking for printf... /usr/bin/printf                                                                                                      
checking GhostScript check... no                                                                                                            
GS /usr/bin/gs                                                                                                                              
checking how to redirect GhostScript output to fd 3... ACCESS DENIED  open_wr:   /dev/fd/3
sandbox memory corruption free(0x00000000015a6350): Invalid argument
/usr/lib/libsandbox.so[0x7ff36f8117c3]
/usr/lib/libsandbox.so[0x7ff36f8101f2]
/usr/lib/libsandbox.so[0x7ff36f8114e5]
/usr/lib/libsandbox.so(open+0xc5)[0x7ff36f813a95]
/bin/sh[0x4668bb]
/bin/sh(do_redirections+0x65)[0x466d35]
/bin/sh[0x4300f3]
/bin/sh(execute_command_internal+0xd57)[0x42d867]
/bin/sh(execute_command+0x81)[0x42e261]
/bin/sh(execute_command_internal+0xa8d)[0x42d59d]
/bin/sh[0x42c8a3]
/bin/sh(execute_command_internal+0x11bf)[0x42dccf]
/bin/sh(parse_and_execute+0x235)[0x46eb55]
/bin/sh(command_substitute+0x628)[0x4453f8]
/bin/sh[0x44b434]
/bin/sh[0x44c919]
/bin/sh(expand_string_assignment+0x75)[0x44d6e5]
/bin/sh[0x44a2b4]
/bin/sh[0x44a49f]
/bin/sh[0x44c66f]
/bin/sh[0x42fc71]
/bin/sh(execute_command_internal+0xd57)[0x42d867]
/bin/sh(execute_command+0x81)[0x42e261]
/bin/sh(execute_command_internal+0x146c)[0x42df7c]
/bin/sh(execute_command+0x81)[0x42e261]
/bin/sh(execute_command_internal+0x146c)[0x42df7c]
/bin/sh(execute_command+0x81)[0x42e261]
/bin/sh(execute_command_internal+0xa8d)[0x42d59d]
/bin/sh(execute_command+0x81)[0x42e261]
/bin/sh(reader_loop+0x89)[0x41b759]
/bin/sh(main+0x13be)[0x41b39e]
/lib/libc.so.6(__libc_start_main+0xe6)[0x3d8fe1e5c6]
/bin/sh[0x418fc9]
using |/bin/cat >&3
checking for perl... /usr/bin/perl


--------------------------- ACCESS VIOLATION SUMMARY ---------------------------                                                            
LOG FILE "/var/log/sandbox/sandbox-8503.log"                                                                                                

VERSION 1.0
FORMAT: F - Function called
FORMAT: S - Access Status
FORMAT: P - Path as passed to function
FORMAT: A - Absolute Path (not canonical)
FORMAT: R - Canonical Path
FORMAT: C - Command Line

F: open_wr
S: deny
P: /dev/fd/3
A: /dev/fd/3
R: /proc/9330/fd/3
C: /bin/sh ./configure --prefix=/usr --host=x86_64-pc-linux-gnu --mandir=/usr/share/man --infodir=/usr/share/info --datadir=/usr/share --sysconfdir=/etc --localstatedir=/var/lib --libdir=/usr/lib64 --build=x86_64-pc-linux-gnu
--------------------------------------------------------------------------------
Comment 1 Ryan Hill (RETIRED) gentoo-dev 2009-02-02 19:21:57 UTC
halo ~ # emerge --info
Portage 2.2_rc23 (default/linux/amd64/2008.0/developer, gcc-4.3.3, glibc-2.9_p20081201-r1, 2.6.28-gentoo-r1 x86_64)
=================================================================                                                  
System uname: Linux-2.6.28-gentoo-r1-x86_64-Intel-R-_Core-TM-2_Duo_CPU_T9300_@_2.50GHz-with-glibc2.2.5             
Timestamp of tree: Mon, 02 Feb 2009 01:00:02 +0000                                                                 
ccache version 2.4 [enabled]                                                                                       
app-shells/bash:     3.2_p48                                                                                       
dev-java/java-config: 1.3.7-r1, 2.1.7                                                                              
dev-lang/python:     2.5.4-r2                                                                                      
dev-python/pycrypto: 2.0.1-r6                                                                                      
dev-util/ccache:     2.4-r8                                                                                        
dev-util/cmake:      2.6.2-r1                                                                                      
sys-apps/baselayout: 2.0.0                                                                                         
sys-apps/openrc:     0.4.2                                                                                         
sys-apps/sandbox:    1.3.3                                                                                         
sys-devel/autoconf:  2.13, 2.63                                                                                    
sys-devel/automake:  1.5, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10.2                                                     
sys-devel/binutils:  2.19.51.0.1                                                                                   
sys-devel/gcc-config: 1.4.1                                                                                        
sys-devel/libtool:   2.2.6a                                                                                        
virtual/os-headers:  2.6.28-r1                                                                                     
ACCEPT_KEYWORDS="amd64 ~amd64"                                                                                     
CBUILD="x86_64-pc-linux-gnu"                                                                                       
CFLAGS="-O3 -march=core2 -fomit-frame-pointer -pipe"                                                               
CHOST="x86_64-pc-linux-gnu"                                                                                        
CONFIG_PROTECT="/etc /usr/kde/3.5/env /usr/kde/3.5/share/config /usr/kde/3.5/shutdown /usr/share/config"           
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/udev/rules.d"                                                                                     
CXXFLAGS="-O3 -march=core2 -fomit-frame-pointer -pipe"                                                                                      
DISTDIR="/usr/portage/distfiles"                                                                                                            
FEATURES="ccache collision-protect cvs digest distlocks fixpackages metadata-transfer multilib-strict parallel-fetch preserve-libs protect-owned sandbox sfperms sign splitdebug strict test unmerge-orphans userfetch userpriv usersandbox"                                            
GENTOO_MIRRORS="http://gentoo.mirrors.tera-byte.com/ http://gentoo.osuosl.org http://distfiles.gentoo.org"                                  
LANG="en_US.utf8"                                                                                                                           
LDFLAGS="-Wl,--as-needed,--hash-style=gnu"                                                                                                  
LINGUAS="en en_US"                                                                                                                          
MAKEOPTS="-j4"                                                                                                                              
PKGDIR="/usr/portage/packages"                                                                                                              
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"                                                                                          
PORTAGE_TMPDIR="/var/tmp"                                                                                                                   
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/home/dirtyepic/overlay /home/dirtyepic/dev/svn/dirtyepic /home/dirtyepic/dev/svn/gcc-porting"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="X a52 aac acpi akode alsa amd64 aspell audiofile avahi bash-completion berkdb bzip2 cairo cdaudio cdr chm cleartype cli consolekit cracklib crypt css cups curl cvs dbus dhcpcd divx dri dts dvd dvdr dvdread eds emboss encode evo exif expat fam ffmpeg fftw firefox3 flac fontconfig foomaticdb gdbm geos gif gimp glib glw gmedia gmp gpgme gphoto2 gstreamer gtk hal hdaps hpn htmlhandbook iconv id3tag imap imlib inotify ipw4965 isdnlog javascript jpeg kde kdeenablefinal kdehiddenvisibility lame laptop libwww lzma mad mdnsresponder-compat midi mikmod mmap mmx mozilla mp3 mpeg multilib ncurses network-cron nntp nptl nptlonly nsplugin ogg opengl openmp pam pch pcre pdf pic png pop ppds pppd pth qt3 qt3support qt4 quicktime readline reflection rtc sasl sesame2 session sha512 smapi smime smp smtp sndfile spell spl srt sse sse2 ssh sslssse3 startup-notification subversion svg sysfs taglib tcpd theora threads threadsafe tiff truetype unicode urandom usb utempter vim-syntaxvorbis wifi wmp wxwindows x264 xcb xcomposite xine xml xorg xpm xulrunner xv xvid zeroconf zlib" ALSA_CARDS="hda-intel" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" ELIBC="glibc" INPUT_DEVICES="mouse keyboard synaptics evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="en en_US" USERLAND="GNU" VIDEO_CARDS="intel"
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, FFLAGS, INSTALL_MASK, LC_ALL, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS
Comment 2 SpanKY gentoo-dev 2009-02-03 00:57:32 UTC
ignore the "memory corruption" stuff, that's been fixed already

/dev/fd/3 however looks funky ...
Comment 3 Ed Catmur 2009-02-05 00:24:17 UTC
Duplicate of bug 256589.
Comment 4 SpanKY gentoo-dev 2009-02-07 12:14:34 UTC
not really

can people try sandbox-1.3.4 to see if it still fails ?
Comment 5 Timo Gurr (RETIRED) gentoo-dev 2009-02-07 17:13:23 UTC
(In reply to comment #4)
> can people try sandbox-1.3.4 to see if it still fails ?

Works fine with sandbox-1.3.4, can we close this one? 

Comment 6 SpanKY gentoo-dev 2009-02-07 17:23:37 UTC
i guess ... not that i made any changes specific to this issue ...
Comment 7 Ryan Hill (RETIRED) gentoo-dev 2009-02-07 23:10:54 UTC
makes no difference to the fd 3 access violation.
Comment 8 Ryan Hill (RETIRED) gentoo-dev 2009-02-07 23:11:37 UTC
checking how to redirect GhostScript output to fd 3... ACCESS DENIED  open_wr:   /dev/fd/3                                                  
./configure: line 3788: /dev/fd/3: Permission denied                                                                                        
using |/bin/cat >&3

--------------------------- ACCESS VIOLATION SUMMARY ---------------------------                                                            
LOG FILE "/var/log/sandbox/sandbox-25433.log"                                                                                               

VERSION 1.0
FORMAT: F - Function called
FORMAT: S - Access Status
FORMAT: P - Path as passed to function
FORMAT: A - Absolute Path (not canonical)
FORMAT: R - Canonical Path
FORMAT: C - Command Line

F: open_wr
S: deny
P: /dev/fd/3
A: /dev/fd/3
R: /proc/26254/fd/3
C: /bin/sh ./configure --prefix=/usr --host=x86_64-pc-linux-gnu --mandir=/usr/share/man --infodir=/usr/share/info --datadir=/usr/share --sysconfdir=/etc --localstatedir=/var/lib --libdir=/usr/lib64 --build=x86_64-pc-linux-gnu
--------------------------------------------------------------------------------
Comment 9 SpanKY gentoo-dev 2009-02-08 00:23:53 UTC
here's the way to reproduce:
$ sandbox
$ (>/dev/fd/3)
ACCESS DENIED  open_wr:   /dev/fd/3
bash: /dev/fd/3: Permission denied

that shouldnt be denied ...
Comment 10 SpanKY gentoo-dev 2009-02-08 02:54:48 UTC
ok, found & fixed the issue (and another one similar to this, but unlikely to be hit by anything)

http://git.overlays.gentoo.org/gitweb/?p=proj/sandbox.git;a=commitdiff;h=00dc6a461d15aeb6dfad4ca7e61b38f9375bc203