Bug 306917 – www-client/mozilla-firefox-2.0.0.19: buffer overflow

• Product: Gentoo Linux
• Status: RESOLVED INVALID

[Description Bartłomiej Syryjczyk 2010-02-26 09:50:56 UTC]

Mozilla Firefox 2.0.0.19 crash

Reproducible: Always

Actual Results:  
*** buffer overflow detected ***: /usr/lib/mozilla-firefox/firefox-bin terminated
======= Backtrace: =========
/lib/libc.so.6(__fortify_fail+0x48)[0xb6c788d8]
/lib/libc.so.6[0xb6c767b0]
/lib/libc.so.6[0xb6c76f68]
/usr/lib/mozilla-firefox/firefox-bin[0x804ce4c]
/usr/lib/mozilla-firefox/firefox-bin[0x805254a]
/usr/lib/mozilla-firefox/firefox-bin[0x804e9b2]
/usr/lib/mozilla-firefox/firefox-bin[0x804afcf]
/lib/libc.so.6(__libc_start_main+0xe1)[0xb6b9fa51]
/usr/lib/mozilla-firefox/firefox-bin[0x804aed1]
======= Memory map: ========
08048000-0805a000 r-xp 00000000 03:01 83225      /usr/lib/mozilla-firefox/firefox-bin
0805a000-0805b000 r--p 00011000 03:01 83225      /usr/lib/mozilla-firefox/firefox-bin
0805b000-0805c000 rw-p 00012000 03:01 83225      /usr/lib/mozilla-firefox/firefox-bin
0805c000-0807d000 rw-p 00000000 00:00 0          [heap]
b6a4d000-b6a50000 rw-p 00000000 00:00 0
b6a50000-b6a57000 r-xp 00000000 03:01 27184      /lib/librt-2.10.1.so
b6a57000-b6a58000 r--p 00007000 03:01 27184      /lib/librt-2.10.1.so
b6a58000-b6a59000 rw-p 00008000 03:01 27184      /lib/librt-2.10.1.so
b6a59000-b6a5a000 rw-p 00000000 00:00 0
b6a5a000-b6a7e000 r-xp 00000000 03:01 78888      /usr/lib/libexpat.so.1.5.2
b6a7e000-b6a80000 r--p 00024000 03:01 78888      /usr/lib/libexpat.so.1.5.2
b6a80000-b6a81000 rw-p 00026000 03:01 78888      /usr/lib/libexpat.so.1.5.2
b6a81000-b6a92000 r-xp 00000000 03:01 15625      /lib/libz.so.1.2.3
b6a92000-b6a93000 r--p 00010000 03:01 15625      /lib/libz.so.1.2.3
b6a93000-b6a94000 rw-p 00011000 03:01 15625      /lib/libz.so.1.2.3
b6a94000-b6a98000 r-xp 00000000 03:01 79260      /usr/lib/libXdmcp.so.6.0.0
b6a98000-b6a99000 r--p 00003000 03:01 79260      /usr/lib/libXdmcp.so.6.0.0
b6a99000-b6a9a000 rw-p 00004000 03:01 79260      /usr/lib/libXdmcp.so.6.0.0
b6a9a000-b6a9c000 r-xp 00000000 03:01 78222      /usr/lib/libXau.so.6.0.0
b6a9c000-b6a9d000 r--p 00001000 03:01 78222      /usr/lib/libXau.so.6.0.0
b6a9d000-b6a9e000 rw-p 00002000 03:01 78222      /usr/lib/libXau.so.6.0.0
b6a9e000-b6ab7000 r-xp 00000000 03:01 81226      /usr/lib/libxcb.so.1.1.0
b6ab7000-b6ab8000 r--p 00018000 03:01 81226      /usr/lib/libxcb.so.1.1.0
b6ab8000-b6ab9000 rw-p 00019000 03:01 81226      /usr/lib/libxcb.so.1.1.0
b6ab9000-b6ac1000 r-xp 00000000 03:01 82898      /usr/lib/libXrender.so.1.3.0
b6ac1000-b6ac2000 r--p 00007000 03:01 82898      /usr/lib/libXrender.so.1.3.0
b6ac2000-b6ac3000 rw-p 00008000 03:01 82898      /usr/lib/libXrender.so.1.3.0
b6ac3000-b6ac4000 rw-p 00000000 00:00 0
b6ac4000-b6ae8000 r-xp 00000000 03:01 80116      /usr/lib/libpng12.so.0.40.0
b6ae8000-b6ae9000 r--p 00023000 03:01 80116      /usr/lib/libpng12.so.0.40.0
b6ae9000-b6aea000 rw-p 00024000 03:01 80116      /usr/lib/libpng12.so.0.40.0
b6aea000-b6b49000 r-xp 00000000 03:01 78221      /usr/lib/libpixman-1.so.0.17.2
b6b49000-b6b4b000 r--p 0005f000 03:01 78221      /usr/lib/libpixman-1.so.0.17.2
b6b4b000-b6b4c000 rw-p 00061000 03:01 78221      /usr/lib/libpixman-1.so.0.17.2
b6b4c000-b6b50000 r-xp 00000000 03:01 83431      /usr/lib/libXfixes.so.3.1.0
b6b50000-b6b51000 r--p 00003000 03:01 83431      /usr/lib/libXfixes.so.3.1.0
b6b51000-b6b52000 rw-p 00004000 03:01 83431      /usr/lib/libXfixes.so.3.1.0
b6b52000-b6b54000 r-xp 00000000 03:01 90265      /usr/lib/libXdamage.so.1.1.0
b6b54000-b6b55000 r--p 00001000 03:01 90265      /usr/lib/libXdamage.so.1.1.0
b6b55000-b6b56000 rw-p 00002000 03:01 90265      /usr/lib/libXdamage.so.1.1.0
b6b56000-b6b64000 r-xp 00000000 03:01 79404      /usr/lib/libXext.so.6.4.0
b6b64000-b6b65000 r--p 0000d000 03:01 79404      /usr/lib/libXext.so.6.4.0
b6b65000-b6b66000 rw-p 0000e000 03:01 79404      /usr/lib/libXext.so.6.4.0
b6b66000-b6b68000 r-xp 00000000 03:01 90269      /usr/lib/libXcomposite.so.1.0.0
b6b68000-b6b69000 r--p 00001000 03:01 90269      /usr/lib/libXcomposite.so.1.0.0
b6b69000-b6b6a000 rw-p 00002000 03:01 90269      /usr/lib/libXcomposite.so.1.0.0
b6b6a000-b6b6b000 rw-p 00000000 00:00 0
b6b6b000-b6b74000 r-xp 00000000 03:01 80477      /usr/lib/libXcursor.so.1.0.2
b6b74000-b6b75000 r--p 00008000 03:01 80477      /usr/lib/libXcursor.so.1.0.2
b6b75000-b6b76000 rw-p 00009000 03:01 80477      /usr/lib/libXcursor.so.1.0.2
b6b76000-b6b7d000 r-xp 00000000 03:01 82936      /usr/lib/libXrandr.so.2.2.0
b6b7d000-b6b7e000 r--p 00006000 03:01 82936      /usr/lib/libXrandr.so.2.2.0
b6b7e000-b6b7f000 rw-p 00007000 03:01 82936      /usr/lib/libXrandr.so.2.2.0
b6b7f000-b6b87000 r-xp 00000000 03:01 78164      /usr/lib/libXi.so.6.0.0
b6b87000-b6b88000 r--p 00007000 03:01 78164      /usr/lib/libXi.so.6.0.0
b6b88000-b6b89000 rw-p 00008000 03:01 78164      /usr/lib/libXi.so.6.0.0
b6b89000-b6cd6000 r-xp 00000000 03:01 58698      /lib/libc-2.10.1.so
b6cd6000-b6cd8000 r--p 0014d000 03:01 58698      /lib/libc-2.10.1.so
b6cd8000-b6cd9000 rw-p 0014f000 03:01 58698      /lib/libc-2.10.1.so
b6cd9000-b6cdc000 rw-p 00000000 00:00 0
b6cdc000-b6ce8000 r-xp 00000000 03:01 91456      /usr/lib/gcc/i686-pc-linux-gnu/4.3.4/libgcc_s.so.1
b6ce8000-b6ce9000 r--p 0000b000 03:01 91456      /usr/lib/gcc/i686-pc-linux-gnu/4.3.4/libgcc_s.so.1
b6ce9000-b6cea000 rw-p 0000c000 03:01 91456      /usr/lib/gcc/i686-pc-linux-gnu/4.3.4/libgcc_s.so.1
b6cea000-b6ceb000 rw-p 00000000 00:00 0
b6ceb000-b6d0f000 r-xp 00000000 03:01 58692      /lib/libm-2.10.1.so
b6d0f000-b6d10000 r--p 00024000 03:01 58692      /lib/libm-2.10.1.so
b6d10000-b6d11000 rw-p 00025000 03:01 58692      /lib/libm-2.10.1.so
b6d11000-b6df4000 r-xp 00000000 03:01 91455      /usr/lib/gcc/i686-pc-linux-gnu/4.3.4/libstdc++.so.6.0.10
b6df4000-b6df8000 r--p 000e3000 03:01 91455      /usr/lib/gcc/i686-pc-linux-gnu/4.3.4/libstdc++.so.6.0.10
b6df8000-b6df9000 rw-p 000e7000 03:01 91455      /usr/lib/gcc/i686-pc-linux-gnu/4.3.4/libstdc++.so.6.0.10
b6df9000-b6dff000 rw-p 00000000 00:00 0
b6dff000-b6e03000 r-xp 00000000 03:01 77936      /usr/lib/libgthread-2.0.so.0.2000.5
b6e03000-b6e04000 r--p 00003000 03:01 77936      /usr/lib/libgthread-2.0.so.0.2000.5
b6e04000-b6e05000 rw-p 00004000 03:01 77936      /usr/lib/libgthread-2.0.so.0.2000.5
b6e05000-b6f21000 r-xp 00000000 03:01 81270      /usr/lib/libX11.so.6.2.0
b6f21000-b6f22000 r--p 0011b000 03:01 81270      /usr/lib/libX11.so.6.2.0
b6f22000-b6f25000 rw-p 0011c000 03:01 81270      /usr/lib/libX11.so.6.2.0
b6f25000-b6ffd000 r-xp 00000000 03:01 77768      /usr/lib/libglib-2.0.so.0.2000.5
b6ffd000-b6ffe000 r--p 000d7000 03:01 77768      /usr/lib/libglib-2.0.so.0.2000.5
b6ffe000-b6fff000 rw-p 000d8000 03:01 77768      /usr/lib/libglib-2.0.so.0.2000.5
b6fff000-b7000000 rw-p 00000000 00:00 0
b7000000-b7003000 r-xp 00000000 03:01 77934      /usr/lib/libgmodule-2.0.so.0.2000.5
b7003000-b7004000 r--p 00002000 03:01 77934      /usr/lib/libgmodule-2.0.so.0.2000.5
b7004000-b7005000 rw-p 00003000 03:01 77934      /usr/lib/libgmodule-2.0.so.0.2000.5/usr/libexec/mozilla-launcher: line 119: 22626 Aborted                 $(type -P aoss) "$mozbin" $xulparams "$@"
firefox-bin exited with non-zero status (134)

[Comment 1 Bartłomiej Syryjczyk 2010-02-26 10:21:31 UTC]

Created attachment 221279 [details]
make.conf

[Comment 2 Bartłomiej Syryjczyk 2010-02-26 10:21:45 UTC]

Created attachment 221281 [details]
emerge --info

[Comment 3 Jory A. Pratt 2010-02-26 14:07:46 UTC]

Firefox-2 is only in the tree for x86-bsd, Please either use the stable 3.x release.

[Comment 4 Bartłomiej Syryjczyk 2010-02-26 14:12:07 UTC]

(In reply to comment #3)
> Firefox-2 is only in the tree for x86-bsd, Please either use the stable 3.x
> release.
???
http://packages.gentoo.org/package/www-client/mozilla-firefox

-- 
guzik

[Comment 5 Jory A. Pratt 2010-02-26 14:22:54 UTC]

We do not support 2.x, I am sorry. This is a major security issues. We will not pay any attention to a 2.x bug report. I know what the keywords are on it, if you feel that using old and security prone software if a must, I will remove all the keywords except those that are unable to move to 3.x at this time.

These are the actual keywords for the package, like I said it is only in tree for bsd users.

[anarchy - mozilla-firefox]  grep -i keywords mozilla-firefox-2.0.0.19.ebuild 
KEYWORDS="alpha amd64 arm hppa ia64 ~mips ppc ppc64 sparc x86 ~x86-fbsd"

[Comment 6 Bartłomiej Syryjczyk 2010-02-26 14:41:51 UTC]

We're using Firefox in embedded systems without any user access, so security isn't important for us.
Under 3.x R-Kiosk add-on is not working properly, so we decided to stay witx 2.x. 2.0.0.17 works fine, 2.0.0.19 crashed.
Nevermind, this is our problem.

[Comment 7 Bartłomiej Syryjczyk 2010-02-27 11:08:31 UTC]

(In reply to comment #5)
> We do not support 2.x, I am sorry.
Can someone send me an ebuild for version 2.0.0.17?

-- 
guzik