Bug 353323 – net-ftp/proftpd breaks if compiled with SSP

• Product: Gentoo Linux
• Status: RESOLVED DUPLICATE

[Description Luca Lesinigo 2011-01-31 15:52:20 UTC]

Currently on my hardened/linux/amd64/no-multilib system, emerging proftpd with an SSP-enabled gcc profile will break proftpd. The daemon will run fine, but will die just after client authentication (signal 11).

I did not change gcc since the last working proftpd, but I did change glibc:
     Thu Jul 29 05:22:21 2010 >>> dev-db/mysql-5.0.90-r2
     Mon Nov 22 12:21:48 2010 >>> sys-devel/gcc-4.4.4-r2
     Mon Nov 22 17:16:38 2010 >>> sys-libs/glibc-2.11.2-r3
     Mon Nov 22 18:12:56 2010 >>> dev-libs/openssl-1.0.0b-r1
     Mon Nov 22 19:36:41 2010 >>> net-ftp/proftpd-1.3.3c
(everything was working fine here)
     Mon Dec 27 11:24:48 2010 >>> dev-libs/openssl-1.0.0c
     Fri Jan  7 14:10:20 2011 >>> dev-db/mysql-5.0.91
     Mon Jan 31 16:16:50 2011 >>> net-ftp/proftpd-1.3.3c
     Mon Jan 31 16:19:46 2011 >>> net-ftp/proftpd-1.3.3d
(both versions won't work now)

I did some tests and found out that proftpd will crash if emerged with
  x86_64-pc-linux-gnu-4.4.4
  x86_64-pc-linux-gnu-4.4.4-hardenednopie
but runs smoothly if emerged with
  x86_64-pc-linux-gnu-4.4.4-hardenednossp
  x86_64-pc-linux-gnu-4.4.4-vanilla

Compiler and toolchain are the same as the old, working, proftpd but I did upgrade MySQL and some other stuff in between. These are my USE flags for proftpd:

[ebuild   R   ] net-ftp/proftpd-1.3.3d  USE="acl caps ctrls hardened mysql ncurses nls pam ssl -authfile -ban -case -clamav -deflate -doc -exec -ident -ifsession -ipv6 -kerberos -ldap -postgres -radius -ratio -readme -rewrite (-selinux) -sftp -shaper -sitemisc -softquota -tcpd -trace -vroot -xinetd" 0 kB

[Comment 1 Luca Lesinigo 2011-01-31 15:52:44 UTC]

Portage 2.1.9.25 (hardened/linux/amd64/no-multilib, gcc-4.4.4-hardenednossp, glibc-2.11.2-r3, 2.6.35-gentoo-r2-domU x86_64)
=================================================================
System uname: Linux-2.6.35-gentoo-r2-domU-x86_64-Intel-R-_Xeon-R-_CPU_X3323_@_2.50GHz-with-gentoo-1.12.14
Timestamp of tree: Sun, 30 Jan 2011 20:30:01 +0000
app-shells/bash:     4.1_p9
dev-lang/python:     2.6.6-r1, 3.1.2-r4
sys-apps/baselayout: 1.12.14-r1
sys-apps/sandbox:    2.4
sys-devel/autoconf:  2.65-r1
sys-devel/automake:  1.11.1
sys-devel/binutils:  2.20.1-r1
sys-devel/gcc:       4.4.4-r2
sys-devel/gcc-config: 1.4.1
sys-devel/libtool:   2.2.10
sys-devel/make:      3.81-r2
virtual/os-headers:  2.6.30-r1 (sys-kernel/linux-headers)
ACCEPT_KEYWORDS="amd64"
ACCEPT_LICENSE="* -@EULA"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-march=nocona -O2 -pipe -fforce-addr"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/eselect/postgresql /etc/fonts/fonts.conf /etc/gconf /etc/php/apache2-php5.3/ext-active/ /etc/php/cgi-php5.3/ext-active/ /etc/php/cli-php5.3/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo"
CXXFLAGS="-march=nocona -O2 -pipe -fforce-addr"
DISTDIR="/usr/portage/distfiles"
FEATURES="assume-digests binpkg-logs distlocks fixlafiles fixpackages news parallel-fetch protect-owned sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch"
GENTOO_MIRRORS="http://distfiles.gentoo.org"
LDFLAGS="-Wl,-O1 -Wl,--as-needed"
LINGUAS="it en"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage"
SYNC="rsync://172.16.0.10/gentoo-portage"
USE="acl amd64 apache2 bcmath berkdb bz2 bzip2 calendar cli cracklib crypt ctype cups curl cxx diskio dri exif filter ftp gd gpm hardened hash iconv imap iproute2 jpeg json justify mfd-rewrites mmx modules mudflap mysql mysqli ncurses nls nptl nptlonly ntplonly openmp pam pcntl pcre pdo perl pic png posix pppd python readline reflection screen session simplexml snmp soap sockets spl sse sse2 ssl suhosin svg sysfs tokenizer truetype unicode urandom wddx xml xmlreader xmlrpc xmlwriter xorg xsl xtended zip zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="alias auth_basic auth_digest authn_dbd authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_user autoindex dav dav_fs dav_lock dbd deflate dir env filter headers log_config logio mime mime_magic negotiation rewrite setenvif so status unique_id cgi proxy proxy_http" APACHE2_MPMS="prefork" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ubx" INPUT_DEVICES="keyboard mouse evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="it en" PHP_TARGETS="php5-3" RUBY_TARGETS="ruby18" USERLAND="GNU" VIDEO_CARDS="fbdev glint intel mach64 mga neomagic nouveau nv r128 radeon savage sis tdfx trident vesa via vmware dummy v4l" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account"
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, FFLAGS, INSTALL_MASK, LANG, LC_ALL, MAKEOPTS, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS

[Comment 2 Christian Ruppert (idl0r) 2011-01-31 15:58:57 UTC]

*** This bug has been marked as a duplicate of bug 353322 ***