Bug 903860

Summary:	app-editors/pluma crashes on hardened / FORTIFY_SOURCE=3
Product:	Gentoo Linux	Reporter:	Alexander van der Meij <gentoo>
Component:	Current packages	Assignee:	Gentoo MATE Desktop <mate>
Status:	RESOLVED FIXED
Severity:	normal	CC:	sam
Priority:	Normal	Keywords:	PATCH
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://github.com/mate-desktop/pluma/issues/664
Whiteboard:
Package list:		Runtime testing required:	---
Bug Depends on:
Bug Blocks:	847148
Attachments:	gdb crash backtrace out-of-bounds-fix-patch updated ebuild that includes patch

Description Alexander van der Meij 2023-04-05 08:18:12 UTC

Back on my favorite Linux distribution using a hardened profile. MATE Desktop is running great with one exception; pluma crashes whenever I use a keyboard shortcut. The following output appears in the terminal:

alexander@deepthought ~/Desktop $ pluma
*** buffer overflow detected ***: terminated
Aborted

This is a known issue that is described and fixed here: 
https://github.com/mate-desktop/pluma/issues/664

Attached to this bug is a full backtrace, the patch to fix the problem from the bug report above and an updated ebuild.

Reproducible: Always

Steps to Reproduce:
1. Compile pluma with hardened profile
2. Open pluma and press CTRL+S to save document
3. Observe crash

Comment 1 Alexander van der Meij 2023-04-05 08:19:09 UTC

Created attachment 859531 [details, diff]
gdb crash backtrace

Comment 2 Alexander van der Meij 2023-04-05 08:20:28 UTC

Created attachment 859532 [details, diff]
out-of-bounds-fix-patch

Comment 3 Alexander van der Meij 2023-04-05 08:20:47 UTC

Created attachment 859533 [details]
updated ebuild that includes patch

Comment 4 Larry the Git Cow gentoo-dev

2023-04-11 02:44:52 UTC

The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=9ca63fb29f80c52ea7863d1b418e7c36abd6166f

commit 9ca63fb29f80c52ea7863d1b418e7c36abd6166f
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2023-04-11 02:43:08 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2023-04-11 02:44:41 +0000

    app-editors/pluma: fix crash w/ FORTIFY_SOURCE=3
    
    Closes: https://bugs.gentoo.org/903860
    Signed-off-by: Sam James <sam@gentoo.org>

 .../files/pluma-1.26.0-fortify-source-3.patch      | 24 +++++++
 app-editors/pluma/pluma-1.26.0-r1.ebuild           | 83 ++++++++++++++++++++++
 2 files changed, 107 insertions(+)