Bug 317727 – dev-lang/tcl: buffer overflows crash the interpreter built with gcc 4.5

• Status: RESOLVED FIXED
• Product: Gentoo Linux

[Description Diego Elio Pettenò (RETIRED) 2010-04-29 08:37:20 UTC]

I'm not sure whether the problem is in SQlite itself or in the TCL interpreter, thus why you both got CCed.

Portage 2.1.8.3 (default/linux/x86/10.0, gcc-4.5.0-asneeded, glibc-2.11.1-r0, 2.6.33.3 i686)
=================================================================
System uname: Linux-2.6.33.3-i686-Quad-Core_AMD_Opteron-tm-_Processor_2350-with-gentoo-2.0.1
Timestamp of tree: Mon, 26 Apr 2010 09:00:01 +0000
app-shells/bash:     4.1_p5
dev-java/java-config: 2.1.10
dev-lang/python:     2.6.5-r1, 3.1.2-r2
dev-util/cmake:      2.8.1-r1
sys-apps/baselayout: 2.0.1
sys-apps/openrc:     0.6.1-r1
sys-apps/sandbox:    2.2
sys-devel/autoconf:  2.65
sys-devel/automake:  1.9.6-r3, 1.11.1
sys-devel/binutils:  2.20.1
sys-devel/gcc:       4.5.0
sys-devel/gcc-config: 1.4.1
sys-devel/libtool:   2.2.6b
virtual/os-headers:  2.6.33
ACCEPT_KEYWORDS="x86 ~x86"
ACCEPT_LICENSE="*"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O2 -pipe"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/share/X11/xkb"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo"
CXXFLAGS="-O2 -pipe"
DISTDIR="/var/cache/distfiles"
FEATURES="assume-digests distlocks fixpackages news parallel-fetch protect-owned sandbox sfperms split-log strict test test-fail-continue unmerge-orphans userfetch userpriv usersandbox"
FFLAGS="-O2 -pipe"
GENTOO_MIRRORS="http://ftp.uni-erlangen.de/pub/mirrors/gentoo"
LANG="en_US.utf8"
LDFLAGS="-Wl,-O1"
MAKEOPTS="-j14"
PKGDIR="/var/spool/portage/packages"
PORTAGE_COMPRESS=""
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/var/cache/portage/tree-tinderbox"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="acl berkdb bzip2 cli cracklib crypt cups cxx dri fortran gdbm gpm iconv ipv6 java5 java6 modules mudflap ncurses nls nostatic nptl nptlonly openmp pam pcre perl pppd python qt3support readline reflection ruby session spl ssl sysfs tcpd unicode vhosts x86 xorg zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1 emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias auth_digest" ELIBC="glibc" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" RUBY_TARGETS="ruby18 jruby ruby19" USERLAND="GNU" 
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LC_ALL, LINGUAS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, PORTDIR_OVERLAY

[Comment 1 Diego Elio Pettenò (RETIRED) 2010-04-29 08:40:52 UTC]

Created attachment 229631 [details]
Build log (compressed)

[Comment 2 Diego Elio Pettenò (RETIRED) 2010-04-29 11:47:32 UTC]

Created attachment 229663 [details]
Build log (tcl)

[Comment 3 Markos Chandras (RETIRED) 2010-06-02 23:18:59 UTC]

*** Bug 322515 has been marked as a duplicate of this bug. ***

[Comment 4 milan hodoscek 2010-06-03 10:13:08 UTC]

tcl compiled with gcc-4.5.0 also dies when used by sci-chemistry/vmd


Portage 2.1.8.3 (default/linux/amd64/10.0, gcc-4.5.0, glibc-2.11.1-r0, 2.6.33-gentoo x86_64)
=================================================================
System uname: Linux-2.6.33-gentoo-x86_64-Intel-R-_Core-TM-2_CPU_T5600_@_1.83GHz-with-gentoo-2.0.1
Timestamp of tree: Thu, 03 Jun 2010 06:30:19 +0000
app-shells/bash:     4.1_p7
dev-java/java-config: 2.1.11
dev-lang/python:     2.6.5-r2, 3.1.2-r3
dev-python/pycrypto: 2.1.0
dev-util/cmake:      2.8.1-r2
sys-apps/baselayout: 2.0.1
sys-apps/openrc:     0.6.1-r1
sys-apps/sandbox:    2.2
sys-devel/autoconf:  2.13, 2.65
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r3, 1.10.3, 1.11.1
sys-devel/binutils:  2.20.1-r1
sys-devel/gcc:       4.4.3-r2, 4.5.0
sys-devel/gcc-config: 1.4.1
sys-devel/libtool:   2.2.7b
virtual/os-headers:  2.6.33
ACCEPT_KEYWORDS="amd64 ~amd64"
ACCEPT_LICENSE="* -@EULA"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-O2 -pipe -march=core2"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/share/X11/xkb /usr/share/config /var/lib/hsqldb /var/spool/torque"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php5/ext-active/ /etc/php/cgi-php5/ext-active/ /etc/php/cli-php5/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c"
CXXFLAGS="-O2 -pipe -march=core2"
DISTDIR="/usr/portage/distfiles"
FEATURES="assume-digests distlocks fixpackages news parallel-fetch protect-owned sandbox sfperms splitdebug strict unmerge-logs unmerge-orphans userfetch"
FFLAGS="-O2"
GENTOO_MIRRORS="http://distfiles.gentoo.org"
LDFLAGS="-Wl,-O1"
LINGUAS="en en_US sl"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/var/lib/layman/gnome /usr/local/portage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="X a52 aac aalib accessibility acl acpi agg aiglx alsa amarok amd64 amr amrnb amrr amrwb ansi apache2 atlas auctex audiofile autoipd bash-completion bbdb beagle berkdb blas bluetooth bonobo bootsplash branding brasero bzip2 cairo canna cardbus cdaudio cdb cdda cddax cddb cdinstall cdio cdparanoia cdr cdrkit cdrom cdrtools chm chroot cjk cli color-console consolekit context cpudetection cracklib crypt css cups curl cxx daap dbus detex dpms dri dv dvd dvdnav dvdr dvdread dvi dvi2tty eap-sim eds emacs enblend encode enscript epiphany epson erandom escreen evo exif exim exiscan-acl expat exscalibar extra extras fakevim fame fat fbcon fbdev fbsplash ffmpeg fftw firefox flac flash foomaticdb fortran freetype gallium gcj gcl gd gdbm gif gimp gimpprint git glib glut glx gmp gnome gnome-keyring gnuplot gnutls gphoto2 gpm graphics graphite graphviz gs gsl gsm gstreamer gstreamer010 gstreamer10 gtk gtk2 gtkhtml gzip-el h323 hal html http httpd humanities i8x0 iconv icu id3 id3tag idn ieee1394 imagemagick imlib imlib2 ipod ipv6 jack jadetex java javascript jpeg jpeg2k kde kpathsea lame lapack laptop latex latex3 lcms leim libcaca libffi libnotify libotf libproxy libsamplerate libsoup llvm llvm-gcc logitech-mouse lto lua lzo lzw mad mailbox maildir mailwrapper matroska mbox md5sum mdnsresponder-compat mjpeg mmap mmx mng modules mono mopac7 mozdevelop mozilla mozsvg mp3 mp4 mpeg mpeg2 mpeg4 mpi mplayer mpqc mudflap multilib musepack music musicbrainz mysql nautilus ncurses network networkmanager nls nodrm nptl nptlonly nsplugin ogg omega openbabel openexr opengl openmp pam pam_chroot pango pascal pcmcia pcre pdf perforce perl pipechan pkcs11 plotutils png pnm policykit posix postscript povray ppds pppd print pstricks publishers pulseaudio pymacs python python3 qt3support qt4 quicktime rar raw readline reflection reiserfs rfkill rhythmbox rt2500usb rtc scanner science scp screen sdl secure-delete semantic-desktop session sift sip skey sockets socks5 sox spamassassin speex spell spl sql srs sse sse2 ssl stream subversion svg svgz sysfs t1lib tcl tcltk tcpd tetex tex tex4ht texmacs tga theora threads threadsafe thumbnail thunderbird tiff timezone tk toolkit-scroll-bars truetype ttcp type1 ubuntu unicode upnp usb utf8 utils v4l v4l2 vcd vcdimager vim vim-pager vim-with-x vorbis wav wavpack web wifi wireshark wma wma123 wmf wordperfect wv wxgtk1 wxwindows x264 xanim xcb xcomposite xetex xft xgl xindy xine xinerama xml xorg xpm xrandr xulrunner xv xvid xvmc yv12 zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic auth_digest authn_anon authn_dbd authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock dbd deflate dir disk_cache env expires ext_filter file_cache filter headers ident imagemap include info log_config logio mem_cache mime mime_magic negotiation proxy proxy_ajp proxy_balancer proxy_connect proxy_http rewrite setenvif so speling status unique_id userdir usertrack vhost_alias" ELIBC="glibc" INPUT_DEVICES="mouse keyboard evdev synaptics" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="en en_US sl" RUBY_TARGETS="ruby18" USERLAND="GNU" VIDEO_CARDS="intel" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account" 
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS

m

[Comment 5 milan hodoscek 2010-06-03 10:15:13 UTC]

Created attachment 233939 [details]
gdb log file for crashing vmd_LINUX

Back trace produced by:
gdb /usr/lib/vmd/vmd_LINUX

[Comment 6 milan hodoscek 2010-06-04 07:55:29 UTC]

I explored the problem a little more:
Even wish itself doesn't work, so I compiled tcl + tk with the gcc-4.4.3 and then everything is back to normal :-)

[Comment 7 David Carlos Manuelda 2010-06-15 22:39:19 UTC]

Any news in this front?

[Comment 8 Thomas Capricelli 2010-06-16 22:37:39 UTC]

since updating on ~amd64 to tcl and tk 8.5.8-r1 (from tcl and tk 8.5.8, so i guess there's nothing but bugfixing), just typing 'wish' crashes. And yes i do use gcc 4.5, so i guess i'm hit by the same bug...

[Comment 9 Samuli Suominen (RETIRED) 2010-06-20 09:13:51 UTC]

*** Bug 324687 has been marked as a duplicate of this bug. ***

[Comment 10 Andrew John Hughes 2010-06-22 16:01:30 UTC]

This is GCC's FORTIFY_SOURCE option catching a buffer overflow in tcl when it didn't before.  So the fault would seem to lie with tcl, assuming a buffer overflow does actually occur.

[Comment 11 Samuli Suominen (RETIRED) 2010-06-24 08:01:52 UTC]

*** Bug 325279 has been marked as a duplicate of this bug. ***

[Comment 12 Ryan Hill (RETIRED) 2010-08-19 05:25:25 UTC]

Fixed.