Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 527866 - www-client/firefox-24.8.0 - when typing in a textarea, firefox: buffer overflow attack in function <unknown> - terminated
Summary: www-client/firefox-24.8.0 - when typing in a textarea, firefox: buffer overfl...
Status: RESOLVED OBSOLETE
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Mozilla Gentoo Team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2014-11-01 17:42 UTC by Honza
Modified: 2017-08-26 17:56 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Honza 2014-11-01 17:42:00 UTC
After upgrading firefox from version 17 (probably 17.0.9, not sure) to version 24 (24.8.0) it started crashing whenever I tried to post anything on web (that is, when I clicked some textarea and started writting in it) with message

"firefox: buffer overflow attack in function <unknown> - terminated"

It didn't do it with clear profile, so I tried to determine case. After long search, I found that I can reproduce the crash on clear profile when I install spellchecker (american, but I don't suppose it matters).

Installing it on another computer doesn't reproduce the problem, so I suppose there is some library (possibly obsolete version) involved. But note that there were no problems with version 17.
Comment 1 Jeroen Roovers (RETIRED) gentoo-dev 2014-11-02 18:14:29 UTC
Please post your `emerge --info www-client/firefox' output in a comment.
Comment 2 Jory A. Pratt gentoo-dev 2014-11-02 18:34:07 UTC
firefox 31.2.0 is going stable, unless you can produce same failure with it your bug will be closed obsolete when it is marked stable.
Comment 3 Honza 2014-11-02 19:20:04 UTC
(In reply to Jeroen Roovers from comment #1)
> Please post your `emerge --info www-client/firefox' output in a comment.

Portage 2.2.8-r2 (hardened/linux/x86/desktop, gcc-4.5.3-hardenednopie, glibc-2.16.0, 3.0.6-gentoo-32 i686)
=================================================================
                        System Settings
=================================================================
System uname: Linux-3.0.6-gentoo-32-i686-AMD_Athlon-tm-_64_Processor_3000+-with-gentoo-2.2
KiB Mem:     3324964 total,    513460 free
KiB Swap:          0 total,         0 free
Timestamp of tree: Sun, 18 Jan 2009 19:45:01 +0000
ld GNU ld (GNU Binutils) 2.20.1.20100303
distcc 3.1 i686-pc-linux-gnu [disabled]
app-shells/bash:          4.2_p53
dev-java/java-config:     1.3.7::<unknown repository>, 2.1.12-r1
dev-lang/python:          2.6.8-r3, 2.7.5-r3
dev-util/cmake:           2.8.12.2-r1
sys-apps/baselayout:      2.2
sys-apps/openrc:          0.11.8
sys-apps/sandbox:         2.5
sys-devel/autoconf:       2.13::<unknown repository>, 2.68, 2.69
sys-devel/automake:       1.4_p6::<unknown repository>, 1.5::<unknown repository>, 1.6.3::<unknown repository>, 1.7.9-r1::<unknown repository>, 1.8.5-r3::<unknown repository>, 1.9.6-r2, 1.10.2::<unknown repository>, 1.11.1, 1.12.6, 1.13.4
sys-devel/binutils:       2.15.92.0.2-r10::<unknown repository>, 2.16.1-r3::<unknown repository>, 2.18-r3, 2.20.1-r1
sys-devel/gcc:            2.95.3-r8::<unknown repository>, 3.4.6-r2::<unknown repository>, 4.4.4-r2, 4.5.3-r2
sys-devel/gcc-config:     1.7.3
sys-devel/libtool:        1.4.3-r3::<unknown repository>, 2.4.2
sys-devel/make:           3.82-r1
sys-kernel/linux-headers: 3.1 (virtual/os-headers)
sys-libs/glibc:           2.16.0
Repositories: gentoo x-portage voip
ACCEPT_KEYWORDS="x86"
ACCEPT_LICENSE="* -@EULA skype-eula"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O2 -mtune=k8 -march=k6 -fomit-frame-pointer -pipe"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/share/config /usr/share/gnupg/qualified.txt /usr/share/openvpn/easy-rsa /var/bind"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php5.3/ext-active/ /etc/php/cgi-php5.3/ext-active/ /etc/php/cli-php5.3/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c"
/www-client/firefox-24.8.0/work/mozilla-esr24/caps/include -I/var/tmp/portage/www-client/firefox-24.8.0/work/mozilla-esr24/content/base/src -I/var/tmp/portage/www-client/firefox-24.8.0/work/mozilla-esr24/content/events/src -I/var/tmp/portage/www-client/firefox-24.8.0/work/mozilla-esr24/db/sqlite3/src -I/var/tmp/portage/www-client/firefox-24.8.0/work/mozilla-esr24/dom/base -I/var/tmp/portage/www-client/firefox-24.8.0/work/mozilla-esr24/dom/src/storage -I/var/tmp/portage/www-client/firefox-24.8.0/work/mozilla-esr24/dom/quota -I/var/tmp/portage/www-client/firefox-24.8.0/work/mozilla-esr24/xpcom/build  -I/var/tmp/portage/www-client/firefox-24.8.0/work/mozilla-esr24/ipc/chromium/src -I/var/tmp/portage/www-client/firefox-24.8.0/work/mozilla-esr24/ipc/glue -I../../ipc/ipdl/_ipdlheaders  -I/var/tmp/portage/www-client/firefox-24.8.0/work/mozilla-esr24/dom/indexedDB -I. -I../../dist/include  -I/usr/include/nspr -I/usr/include/nss      -fPIC  -Wall -Wpointer-arith -Woverloaded-virtual -Werror=return-type -Wtype-limits -Wempty-body -Wsign-compare -Wno-invalid-offsetof -Wcast-align -mtune=k8 -march=k6 -pipe -mno-avx -fno-exceptions -fno-strict-aliasing -fno-rtti -ffunction-sections -fdata-sections -fno-exceptions -std=gnu++0x -fno-tree-vrp -pthread -pipe  -DNDEBUG -DTRIMMED -O2 -fomit-frame-pointer    -DMOZILLA_CLIENT -include ../../mozilla-config.h -MD -MP -MF .deps/TransactionThreadPool.o.pp  /var/tmp/portage/www-client/firefoxitch -Wno-unused-parameter -O2 -mtune=k8 -march=k6 -fomit-frame-pointer -pipe -fno-strict-aliasing -fopenmp -c -o display/sodipodi-ctrl.o display/sodipodi-ctrl.cpp
CXXFLAGS="-O2 -mtune=k8 -march=k6 -fomit-frame-pointer -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="assume-digests binpkg-logs config-protect-if-modified distlocks ebuild-locks fixlafiles merge-sync news parallel-fetch preserve-libs protect-owned sandbox sfperms unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr"
FFLAGS=""
GENTOO_MIRRORS="http://gentoo.oregonstate.edu http://www.ibiblio.org/pub/Linux/distributions/gentoo"
LDFLAGS="-Wl,-O1 -Wl,--as-needed"
LINGUAS="en en_GB cs"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage /usr/portage/local/layman/voip"
SYNC="rsync://rsync.europe.gentoo.org/gentoo-portage"
USE="3dnow 3dnowex 3dnowext X Xaw3d a52 aac aalib acl acpi alsa apache2 apm avi bash-completion berkdb bluetooth branding browserplugin bzip2 cairo caps cdr cli consolekit cracklib crypt cups curl cxx dbus dga directfb doc dri dts dvd dvdr emboss encode erandom esd exif fam fbcon firefox flac force-cgi-redirect gd gdbm gdu ggi gif gpm gtk hardened iconv imagemagick imlib innodb ipv6 java jpeg lcms ldap lesstif libcaca libnotify libwww lirc lua lzma mad mailwrapper mbox mcal memlimit mikmod mmx mmx2 mmxext mng modules motif mozilla mp3 mp4 mpeg mudflap multislot mysql ncurses nls nptl nptlonly ogg oggvorbis old-linux opengl openmp oss pam pango pcre pdf pdflib perl pic png policykit postscript ppds pppd python qt qt3support qt4 quicktime readline samba sdl session slang snmp spell sqlite sse sse2 ssl startup-notification svg svga sysfs tcpd tetex theora tiff truetype udev unicode urandom usb userlocales v4l v4l2 vhosts videos vorbis wmf x264 x86 xattr xcb xgetdefault xml xorg xosd xulrunner xv xvid zlib" ABI_X86="32" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1 emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" APACHE2_MODULES="access auth auth_dbm auth_anon auth_basic auth_digest authz_host authz_default authz_user alias file-cache echo charset-lite cache disk-cache mem-cache ext-filter case_filter case-filter-in deflate mime-magic cern-meta expires headers usertrack unique-id proxy proxy-connect proxy-ftp proxy-http info include cgi cgid dav dav_fs vhost-alias speling rewrite log_config logio env setenvif mime status autoindex asis negotiation dir imap actions userdir so mem_cache mime_magic vhost_alias filter authn_file" CALLIGRA_FEATURES="kexi words flow plan sheets stage tables krita karbon braindump author" CAMERAS="ptp2" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ublox ubx" INPUT_DEVICES="evdev keyboard mouse" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" LINGUAS="en en_GB cs" LIRC_DEVICES="avermedia98 devinput" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php5-3" PYTHON_SINGLE_TARGET="python2_7" PYTHON_TARGETS="python2_7 python2_6" RUBY_TARGETS="ruby19" USERLAND="GNU" VIDEO_CARDS="nv vesa r128 fbdev nouveau radeon r300 r600" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account"
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS

=================================================================
                        Package Settings
=================================================================

www-client/firefox-24.8.0 was built with the following:
USE="alsa dbus libnotify minimal startup-notification -bindist -custom-cflags -custom-optimization -debug -gstreamer -jit -pgo -pulseaudio (-selinux) -system-cairo -system-icu -system-jpeg -system-sqlite -test -wifi" LINGUAS="cs en_GB -af -ak -ar -as -ast -be -bg -bn_BD -bn_IN -br -bs -ca -csb -cy -da -de -el -en_ZA -eo -es_AR -es_CL -es_ES -es_MX -et -eu -fa -fi -fr -fy_NL -ga_IE -gd -gl -gu_IN -he -hi_IN -hr -hu -hy_AM -id -is -it -ja -kk -km -kn -ko -ku -lg -lt -lv -mai -mk -ml -mr -nb_NO -nl -nn_NO -nso -or -pa_IN -pl -pt_BR -pt_PT -rm -ro -ru -si -sk -sl -son -sq -sr -sv_SE -ta -ta_LK -te -th -tr -uk -vi -zh_CN -zh_TW -zu"
CFLAGS="-mtune=k8 -march=k6 -pipe -mno-avx"
CXXFLAGS="-mtune=k8 -march=k6 -pipe -mno-avx"
Comment 4 Honza 2014-11-03 01:59:22 UTC
I've upgraded to app-text/hunspell-1.3.2-r3 (from 1.2.8), recompiled firefox, reinstalled spellcheck extensions and seems it helped: I've already posted several textareas and no crash.

I'm not going to downgrade hunspell again just to test newer firefox, but I think raising the version in DEPEND for both shouldn't hurt.
Comment 5 Jory A. Pratt gentoo-dev 2017-08-26 17:56:06 UTC
If you feel I have closed your bug and it is still a current issue, please reopen and update it completely. We will not work bugs that have no ebuild in tree any longer or can not be reproduced with a current system.

Thank You for your support and understanding
The Mozilla Team