Bug 339259 – app-text/cuneiform _FORTIFY_SOURCE indicates presence of overflow

• Product: Gentoo Linux
• Status: RESOLVED WORKSFORME

[Description Diego Elio Pettenò (RETIRED) 2010-09-30 14:14:09 UTC]

You're receiving this bug because the package in Summary has produced _FORTIFY_SOURCE related warnings indicating the presence of a sure overflow in a static buffer.

Even though this is not always an indication of a security problem it might even be. So please check this out ASAP.

By the way, _FORTIFY_SOURCE is disabled when you disable optimisation, so don't try finding out the cause using -O0.

Thanks,
Your friendly neighborhood tinderboxer

[Comment 1 Diego Elio Pettenò (RETIRED) 2010-09-30 14:14:47 UTC]

Created attachment 249081 [details]
Build log

[Comment 2 Aleksandr Yakimov 2010-10-01 12:10:52 UTC]

I'm not able to reproduce this issue 

Portage 2.2_rc88 (default/linux/x86/10.0/desktop/kde, gcc-4.4.4, glibc-2.11.2-r0, 2.6.35-gentoo i686)

Portage 2.2_rc88 (default/linux/amd64/10.0/desktop/kde, gcc-4.4.4, glibc-2.12.1-r1, 2.6.35-gentoo-r8 x86_64)

(for other packages QA reported)

[Comment 3 Peter Volkov (RETIRED) 2011-01-15 22:19:58 UTC]

I don't see such errors too.

[Comment 4 Aleksandr Yakimov 2011-08-15 09:53:01 UTC]

GCC-4.6.1

* QA Notice: Package has poor programming practices which may compile
 *            fine but exhibit random runtime failures.
 * /usr/include/bits/stdio2.h:285:71: warning: call to ‘__fread_chk_warn’ declared with attribute warning: fread called with bigger size * nmemb than length of destination buffer [enabled by default]


 * QA Notice: Package has poor programming practices which may compile
 *            fine but exhibit random runtime failures.
 * /usr/include/bits/string3.h:105:3: warning: call to __builtin___strcpy_chk will always overflow destination buffer [enabled by default]
 * /usr/include/bits/string3.h:105:3: warning: call to __builtin___strcpy_chk will always overflow destination buffer [enabled by default]
 * /usr/include/bits/string3.h:105:3: warning: call to __builtin___strcpy_chk will always overflow destination buffer [enabled by default]
 * /usr/include/bits/string3.h:85:3: warning: call to __builtin___memset_chk will always overflow destination buffer [enabled by default]


 * QA Notice: Package has poor programming practices which may compile
 *            fine but exhibit random runtime failures.
 * /var/tmp/portage/app-text/cuneiform-1.1.0/work/cuneiform-linux-1.1.0/cuneiform_src/Kern/rdib/sources/cpp/CTDIB.cpp:541:2: warning: converting to non-pointer type ‘Bool32 {aka int}’ from NULL [-Wconversion-null]


 * QA Notice: Package has poor programming practices which may compile
 *            fine but exhibit random runtime failures.
 * /var/tmp/portage/app-text/cuneiform-1.1.0/work/cuneiform-linux-1.1.0/cuneiform_src/Kern/rdib/sources/cpp/CTDIB.cpp:640:7: warning: NULL used in arithmetic [-Wpointer-arith]


 * QA Notice: Package has poor programming practices which may compile
 *            fine but exhibit random runtime failures.
 * /var/tmp/portage/app-text/cuneiform-1.1.0/work/cuneiform-linux-1.1.0/cuneiform_src/Kern/std/src/stdleo.cpp:1488:114: warning: passing NULL to non-pointer argument 2 of ‘int WideCharToMultiByte(uint, uint32_t, const int16_t*, int, char*, int, const char*, pBool)’ [-Wconversion-null]
 * /var/tmp/portage/app-text/cuneiform-1.1.0/work/cuneiform-linux-1.1.0/cuneiform_src/Kern/cimage/sources/main/ctimemory.cpp:104:23: warning: passing NULL to non-pointer argument 1 of ‘Bool32 CFIO_Init(uint16_t, Handle)’ [-Wconversion-null]
 * /var/tmp/portage/app-text/cuneiform-1.1.0/work/cuneiform-linux-1.1.0/cuneiform_src/Kern/rimage/sources/main/crimemory.cpp:103:23: warning: passing NULL to non-pointer argument 1 of ‘Bool32 CFIO_Init(uint16_t, Handle)’ [-Wconversion-null]
 * /var/tmp/portage/app-text/cuneiform-1.1.0/work/cuneiform-linux-1.1.0/cuneiform_src/Kern/rstuff/sources/main/rsmemory.cpp:117:23: warning: passing NULL to non-pointer argument 1 of ‘Bool32 CFIO_Init(uint16_t, Handle)’ [-Wconversion-null]
 * /var/tmp/portage/app-text/cuneiform-1.1.0/work/cuneiform-linux-1.1.0/cuneiform_src/Kern/puma/c/debug.cpp:73:22: warning: passing NULL to non-pointer argument 3 of ‘void LDPUMA_RegistryHelp(Handle, const char*, Bool32)’ [-Wconversion-null]