Bug 270249 – sci-physics/root-5.20.00-r3 build fails with: "*** stack smashing detected ***"

• Product: Gentoo Linux
• Status: RESOLVED TEST-REQUEST

[Description Kliakhandler Kosta 2009-05-18 05:54:59 UTC]

I use hardened gentoo on amd64, and the root build fails with:

*** stack smashing detected ***: rootcint_tmp - terminated
rootcint_tmp: stack smashing attack in function int G__loadfile(const char*) - terminated
Report to http://bugs.gentoo.org/

build.log attached.
emerge --info:

# emerge --info                                                                       
Portage 2.1.6.11 (hardened/amd64/multilib, gcc-3.4.6, glibc-2.8_p20080602-r1, 2.6.20-hardened-r10 x86_64)
=================================================================                                        
System uname: Linux-2.6.20-hardened-r10-x86_64-AMD_Athlon-tm-_64_Processor_3700+-with-glibc2.3.2         
Timestamp of tree: Sun, 17 May 2009 01:00:01 +0000                                                       
app-shells/bash:     3.2_p39                                                                             
dev-java/java-config: 1.3.7-r1, 2.1.7                                                                    
dev-lang/python:     2.4.4-r14, 2.5.4-r2
dev-python/pycrypto: 2.0.1-r8
dev-util/cmake:      2.6.2-r1
sys-apps/baselayout: 1.12.11.1
sys-apps/sandbox:    1.6-r2
sys-devel/autoconf:  2.63
sys-devel/automake:  1.4_p6, 1.5, 1.7.9-r1, 1.9.6-r2, 1.10.2
sys-devel/binutils:  2.18-r3
sys-devel/gcc-config: 1.4.1
sys-devel/libtool:   1.5.26
virtual/os-headers:  2.6.27-r2
ACCEPT_KEYWORDS="amd64"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-march=athlon64 -O2 -pipe"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /opt/openfire/resources/security/ /var/www"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/php/apache2-php5/ext-active/ /etc/php/cgi-php5/ext-active/ /etc/php/cli-php5/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c /etc/udev/rules.d"
CXXFLAGS="-march=athlon64 -O2 -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoconfig buildpkg collision-protect distlocks fixpackages parallel-fetch protect-owned sandbox sfperms strict unmerge-orphans usefetch userfetch userpriv usersandbox"
GENTOO_MIRRORS="http://mirror.muntinternet.net/pub/gentoo/ http://gentoo.tiscali.nl/ http://linux.rz.ruhr-uni-bochum.de/download/gentoo-mirror/"
LANG="en_US.UTF-8"
LC_ALL="en_US.UTF-8"
LDFLAGS=""
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/portage/local/layman/webapps-experimental /usr/portage/local/layman/kolab /usr/portage/local"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="7zip acl amd64 apache2 bash-completion berkdb bzip2 chroot clamav cracklib crypt ctype curl dbx emacs fam fastcgi gd hardened iconv imap justify kolab latex ldap logrotate midi mysql mysqli ncurses nls nptl nptlonly pam pcre php pic prelude pwdb readline ruby sasl session sieve simplexml slang spell sqlite sqlite3 ssl subversion tcpd tidy unicode urandom vhosts webdav xattr xml xorg zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x       ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3   trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic auth_digest authn_anon authn_dbd authn_dbm authn_default authn_fileauthz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock dbd deflate dir disk_cache env expires ext_filter file_cache filter headers ident imagemap include info log_config logio mem_cache mime mime_magic negotiation proxy proxy_ajp proxy_balancer proxy_connect proxy_http rewrite setenvif so speling statusunique_id userdir usertrack vhost_alias" ELIBC="glibc" INPUT_DEVICES="mouse keyboard evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" USERLAND="GNU" VIDEO_CARDS="none"
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, FFLAGS, INSTALL_MASK, LINGUAS, MAKEOPTS, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS

Please let me know if any more info is required.

Reproducible: Always

[Comment 1 Kliakhandler Kosta 2009-05-18 05:56:48 UTC]

Created attachment 191619 [details]
build.log

[Comment 2 Sébastien Fabbro (RETIRED) 2009-06-25 04:13:33 UTC]

It seems a hardened related bug. If you have the time, could you check with root-5.22.00-r2? 
Thanks.

[Comment 3 Sébastien Fabbro (RETIRED) 2009-09-23 23:51:47 UTC]

please try with root-5.22.00-r3, and re-open if needed.
Thanks.

[Comment 4 Kliakhandler Kosta 2009-10-09 09:56:31 UTC]

(In reply to comment #3)
> please try with root-5.22.00-r3, and re-open if needed.
> Thanks.
> 

Thanks for your help! Unfortunately, the system this was reported on is not in existence anymore, so I won't be able to test it on it. I will try to test it on something similar when I can, however.