Bug 143648 – dev-util/efence - double free in dlsym/dlerror in glibc 2.3.6-r4 and 2.4-r3

• Product: Gentoo Linux
• Status: RESOLVED INVALID

[Description Stian Skjelstad 2006-08-12 03:54:50 UTC]

ElectricFence Aborting:
Electric Fence: free(b6c9efc0): memory already freed. allocated from UNKNOWN (use #include "efence.h")(0)

Program received signal SIGILL, Illegal instruction.
[Switching to Thread 16384 (LWP 11842)]
Error while running hook_stop:
Invalid type combination in ordering comparison.
0xb7e8a671 in kill () from /lib/libc.so.6
gdb> bt
#0  0xb7e8a671 in kill () from /lib/libc.so.6
#1  0xb7fcfd66 in operator delete[] () from /usr/lib/libefence.so.0
#2  0xb7fd1144 in _eff_deallocate () from /usr/lib/libefence.so.0
#3  0xb7fd1ce9 in _eff_free () from /usr/lib/libefence.so.0
#4  0xb7fd21cd in free () from /usr/lib/libefence.so.0
#5  0xb7fd7353 in dlerror () from /lib/libdl.so.2
#6  0xb7fd6e6c in dlsym () from /lib/libdl.so.2
#7  0xb7fe2e09 in lnkGetSymbol (id=0x0, name=0xbfffbd00 "fpsReg") at plinkman.c:239


I see this at random when using libefence with EF_PROTECT_FREE=1. Project used is "open cubic player" for unix. It does a bunch of successfull dlopen/dlsym/dlerror before it fails here. No problem when ran without efence. (But I get a lot of strange problems when using valgrind, but that is a complete different story)


Portage 2.1-r1 (default-linux/x86/2006.0, gcc-3.4.6, glibc-2.4-r3, 2.6.16.19 i686)
=================================================================
System uname: 2.6.16.19 i686 Intel(R) Pentium(R) III Mobile CPU      1000MHz
Gentoo Base System version 1.6.15
ccache version 2.3 [enabled]
app-admin/eselect-compiler: [Not Present]
dev-lang/python:     2.3.5-r2, 2.4.3-r1
dev-python/pycrypto: 2.0.1-r5
dev-util/ccache:     2.3
dev-util/confcache:  [Not Present]
sys-apps/sandbox:    1.2.17
sys-devel/autoconf:  2.13, 2.59-r7
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2
sys-devel/binutils:  2.16.1-r3
sys-devel/gcc-config: 1.3.13-r3
sys-devel/libtool:   1.5.22
virtual/os-headers:  2.6.11-r2
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O3 -march=pentium3m -msse -mmmx -pipe"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/lib/mozilla/defaults/pref /usr/share/X11/xkb"
CONFIG_PROTECT_MASK="/etc/env.d /etc/gconf /etc/revdep-rebuild /etc/terminfo"
CXXFLAGS="-O3 -march=pentium3m -msse -mmmx -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoaddcvs autoconfig ccache distlocks metadata-transfer sandbox sfperms strict"
GENTOO_MIRRORS="http://distfiles.gentoo.org http://distro.ibiblio.org/pub/linux/distributions/gentoo"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --delete-after --stats --timeout=180 --exclude='/distfiles' --exclude='/local' --exclude='/packages'"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="x86 X adplug alsa apache2 apm avi bash-completion berkdb bitmap-fonts browserplugin bzip2 cairo cdparanoia cdr cli crypt cups dbus dhcp divx4linux dlloader dri dvd dvdr eds emboss encode exif firefox flac foomaticdb fortran gd gdbm gif gimpprint glitz glut gnome gpm gstreamer gtk gtk2 hal imlib ipv6 isdnlog jack java joystick jpeg kde libg++ libwww lirc mad mikmod mmx motif mozilla moznocompose moznoirc moznomail mp3 mpeg music nautilus ncurses nls nptl nptlonly ntpl ogg opengl pam pcre pdflib perl pic png ppds pppd python qt3 qt4 quicktime readline real reflection rtc samba sasl sdl session sidplay spell spl sse ssl svg tcpd theora tiff timidity truetype truetype-fonts type1-fonts udev utf8 v4fl v4fl2 voice vorbis win32codecs xml xmms xorg xrandr xv xvid zlib elibc_glibc input_devices_evdev input_devices_keyboard input_devices_mouse kernel_linux lirc_devices_com1 userland_GNU video_cards_i810 video_cards_apm"
Unset:  CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL, LDFLAGS, LINGUAS, PORTAGE_RSYNC_EXTRA_OPTS

[Comment 1 Stian Skjelstad 2006-09-13 23:12:07 UTC]

Seems that efence has issues that has been fixed in its forked version, duma.