Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 911389 - net-analyzer/mtr-0.95: buffer overflow on hardened
Summary: net-analyzer/mtr-0.95: buffer overflow on hardened
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Sam James
URL:
Whiteboard:
Keywords:
Depends on:
Blocks: 847148
  Show dependency tree
 
Reported: 2023-07-28 13:27 UTC by Agostino Sarubbo
Modified: 2023-07-28 13:42 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Agostino Sarubbo gentoo-dev 2023-07-28 13:27:36 UTC
~ # mtr -c 20 -w -r -n 8.8.8.8
Start: 2023-07-28T15:25:10+0200
*** buffer overflow detected ***: terminated
Aborted

See also:
https://github.com/traviscross/mtr/issues/392
Comment 1 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2023-07-28 13:32:11 UTC
Missing emerge --info (and ideally a backtrace). I can't reproduce it yet.
Comment 2 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2023-07-28 13:35:23 UTC
Oh, I got it.
Comment 3 Larry the Git Cow gentoo-dev 2023-07-28 13:42:24 UTC
The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=a951a89289d8b3d8129f02141e38f5413a55902f

commit a951a89289d8b3d8129f02141e38f5413a55902f
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2023-07-28 13:41:50 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2023-07-28 13:41:50 +0000

    net-analyzer/mtr: backport F_S=3 fix
    
    Closes: https://bugs.gentoo.org/911389
    Signed-off-by: Sam James <sam@gentoo.org>

 .../mtr/files/mtr-0.95-fortify-source-3.patch      | 34 +++++++++++
 net-analyzer/mtr/mtr-0.95-r1.ebuild                | 68 ++++++++++++++++++++++
 net-analyzer/mtr/mtr-9999.ebuild                   |  9 +--
 3 files changed, 107 insertions(+), 4 deletions(-)