Bug 406545 – app-shells/bash: segfault when processing rsync configure on hardened

• Product: Gentoo Linux
• Status: RESOLVED FIXED

[Description Agostino Sarubbo 2012-03-02 08:38:48 UTC]

Created attachment 303959 [details]
build.log

Portage 2.1.10.44 (hardened/linux/x86, gcc-4.4.5, glibc-2.13-r4, 3.1.5-gentoo i686)                                                                                                 
=================================================================                                                                                                                   
System uname: Linux-3.1.5-gentoo-i686-Intel-R-_Celeron-R-_M_CPU_430_@_1.73GHz-with-gentoo-2.0.3                                                                                     
Timestamp of tree: Thu, 01 Mar 2012 19:30:01 +0000                                                                                                                                  
app-shells/bash:          4.1_p9                                                                                                                                                    
dev-lang/python:          2.7.2-r3                                                                                                                                                  
dev-util/cmake:           2.8.6-r4                                                                                                                                                  
dev-util/pkgconfig:       0.26                                                                                                                                                      
sys-apps/baselayout:      2.0.3                                                                                                                                                     
sys-apps/openrc:          0.9.8.4                                                                                                                                                   
sys-apps/sandbox:         2.5                                                                                                                                                       
sys-devel/autoconf:       2.13, 2.68                                                                                                                                                
sys-devel/automake:       1.11.1                                                                                                                                                    
sys-devel/binutils:       2.21.1-r1                                                                                                                                                 
sys-devel/gcc:            4.4.5, 4.6.2                                                                                                                                              
sys-devel/gcc-config:     1.4.1-r1                                                                                                                                                  
sys-devel/libtool:        2.4-r1                                                                                                                                                    
sys-devel/make:           3.82-r1                                                                                                                                                   
sys-kernel/linux-headers: 3.1 (virtual/os-headers)                                                                                                                                  
sys-libs/glibc:           2.13-r4                                                                                                                                                   
Repositories: gentoo x-portage                                                                                                                                                      
ACCEPT_KEYWORDS="x86"                                                                                                                                                               
ACCEPT_LICENSE="*"                                                                                                                                                                  
CBUILD="i686-pc-linux-gnu"                                                                                                                                                          
CFLAGS="-O2 -march=prescott"                                                                                                                                                        
CHOST="i686-pc-linux-gnu"                                                                                                                                                           
CONFIG_PROTECT="/etc /usr/share/config /usr/share/gnupg/qualified.txt /usr/share/themes/oxygen-gtk/gtk-2.0"                                                                         
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo"                    
CXXFLAGS="-O2 -march=prescott"                                                                                                                                                      
DISTDIR="/media/sources"                                                                                                                                                            
EMERGE_DEFAULT_OPTS="--with-bdeps y --quiet-build n"
FEATURES="assume-digests binpkg-logs collision-protect distlocks ebuild-locks fixlafiles news parallel-fetch protect-owned sandbox sfperms sign split-log strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync"
FFLAGS=""
GENTOO_MIRRORS="http://distfiles.gentoo.org"
LANG="it_IT.UTF-8"
LDFLAGS="-Wl,-O1 -Wl,--as-needed -Wl,--hash-style=gnu"
LINGUAS="en en_GB"
MAKEOPTS="-j1"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="X aac acl acpi alsa apic bash-completion berkdb bzip2 cairo cli consolekit cracklib crypt custom-cflags custom-optimization cxx dbus dri dvd extras ffmpeg gdbm gpm gtk hardened iconv jpeg jpeg2k kde lame lm_sensors mad mmx modules mp3 mudflap ncurses networkmanager nls nptl nptlonly nsplugin opengl openmp pam pax_kernel pcre pic png policykit pppd qt3support qt4 readline semantic-desktop session sse sse2 ssl svg symlink sysfs tcpd threads tiff tordns udev urandom x264 x86 xorg zlib" ALSA_CARDS="hda-intel" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" ELIBC="glibc" INPUT_DEVICES="keyboard mouse evdev synaptics" KERNEL="linux" LINGUAS="en en_GB" PHP_TARGETS="php5-3" RUBY_TARGETS="ruby18" USERLAND="GNU" VIDEO_CARDS="intel"
Unset:  CPPFLAGS, CTARGET, INSTALL_MASK, LC_ALL, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS

[Comment 1 Agostino Sarubbo 2012-03-02 08:40:19 UTC]

Created attachment 303961 [details]
config.log

[Comment 2 Agostino Sarubbo 2012-03-02 09:50:47 UTC]

and from grsec.log:

Mar  1 22:26:03 localhost kernel: grsec: Segmentation fault occurred at 000040cc in /tmp/portage/net-misc/rsync-3.0.9/work/rsync-3.0.9/configure.sh[configure.sh:16588] uid/euid:250/250 gid/egid:250/250, parent /usr/lib/portage/bin/ebuild.sh[ebuild.sh:16570] uid/euid:250/250 gid/egid:250/250

[Comment 3 SpanKY 2012-03-02 18:23:12 UTC]

the shell crashed.  really can't be the fault of rsync.

[Comment 4 Francisco Blas Izquierdo Riera (RETIRED) 2012-03-02 20:26:25 UTC]

Hey ago, do you happen to have enabled the mem-scramble USe on bash? If you do disable it, it is known to give issues on hardened.

[Comment 5 Magnus Granberg 2013-11-23 20:11:33 UTC]

Ago can still make bash segfault?
And do you have mem-scramble on?

[Comment 6 Agostino Sarubbo 2013-11-23 20:16:54 UTC]

(In reply to Magnus Granberg from comment #5)
> Ago can still make bash segfault?
No, it is fine with the new bash version.

> And do you have mem-scramble on?
no.