Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 284155 - x11-misc/adesklets should be removed from Portage
Summary: x11-misc/adesklets should be removed from Portage
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: Gentoo Dockapp Team
URL: http://sourceforge.net/mailarchive/me...
Whiteboard:
Keywords:
: 172603 247532 293447 331479 (view as bug list)
Depends on:
Blocks: fortify-source
  Show dependency tree
 
Reported: 2009-09-08 11:11 UTC by Peter Volkov (RETIRED)
Modified: 2010-10-11 08:55 UTC (History)
4 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
full backtrace (adesklets-fortify.txt,17.41 KB, text/plain)
2009-09-08 11:11 UTC, Peter Volkov (RETIRED)
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Peter Volkov (RETIRED) gentoo-dev 2009-09-08 11:11:31 UTC
In case x11-misc/adesklets is built with -D_FORTIFY_SOURCE=2, attempts to use yab-0.0.2 aborts the program (just put cursor on yab panel and move a bit) with the following backtrace:

*** buffer overflow detected ***: adesklets terminated
======= Backtrace: =========
/lib/libc.so.6(__fortify_fail+0x37)[0x7f03c3ff04e7]
/lib/libc.so.6[0x7f03c3fee320]
/lib/libc.so.6[0x7f03c3fed8db]
adesklets[0x413d32]
adesklets[0x407caa]
adesklets[0x4065c5]
/lib/libc.so.6(__libc_start_main+0xe6)[0x7f03c3f2ba26]
adesklets(rl_filename_completion_function+0x611)[0x4064a9]
======= Memory map: ========
00400000-0041e000 r-xp 00000000 08:02 513501                             /usr/bin/adesklets
0061d000-0061e000 r--p 0001d000 08:02 513501                             /usr/bin/adesklets
0061e000-0061f000 rw-p 0001e000 08:02 513501                             /usr/bin/adesklets
0061f000-00620000 rw-p 00000000 00:00 0 
01d66000-01e64000 rw-p 00000000 00:00 0                                  [heap]
7f03bf0d3000-7f03bf0e9000 r-xp 00000000 08:02 141849                     /lib64/libgcc_s.so.1
7f03bf0e9000-7f03bf2e8000 ---p 00016000 08:02 141849                     /lib64/libgcc_s.so.1
7f03bf2e8000-7f03bf2e9000 r--p 00015000 08:02 141849                     /lib64/libgcc_s.so.1
7f03bf2e9000-7f03bf2ea000 rw-p 00016000 08:02 141849                     /lib64/libgcc_s.so.1
7f03bf2ea000-7f03bf2eb000 r-xp 00000000 08:02 570064                     /usr/lib64/imlib2/loaders/argb.so
7f03bf2eb000-7f03bf4eb000 ---p 00001000 08:02 570064                     /usr/lib64/imlib2/loaders/argb.so
7f03bf4eb000-7f03bf4ec000 r--p 00001000 08:02 570064                     /usr/lib64/imlib2/loaders/argb.so
7f03bf4ec000-7f03bf4ed000 rw-p 00002000 08:02 570064                     /usr/lib64/imlib2/loaders/argb.so
7f03bf4ed000-7f03bf4f0000 r-xp 00000000 08:02 570054                     /usr/lib64/imlib2/loaders/bmp.so
7f03bf4f0000-7f03bf6ef000 ---p 00003000 08:02 570054                     /usr/lib64/imlib2/loaders/bmp.so
7f03bf6ef000-7f03bf6f0000 r--p 00002000 08:02 570054                     /usr/lib64/imlib2/loaders/bmp.so
7f03bf6f0000-7f03bf6f1000 rw-p 00003000 08:02 570054                     /usr/lib64/imlib2/loaders/bmp.so
7f03bf6f1000-7f03bf700000 r-xp 00000000 08:02 130113                     /lib64/libbz2.so.1.0.5
7f03bf700000-7f03bf8ff000 ---p 0000f000 08:02 130113                     /lib64/libbz2.so.1.0.5
7f03bf8ff000-7f03bf900000 r--p 0000e000 08:02 130113                     /lib64/libbz2.so.1.0.5
7f03bf900000-7f03bf901000 rw-p 0000f000 08:02 130113                     /lib64/libbz2.so.1.0.5
7f03bf901000-7f03bf903000 r-xp 00000000 08:02 570043                     /usr/lib64/imlib2/loaders/bz2.so
7f03bf903000-7f03bfb02000 ---p 00002000 08:02 570043                     /usr/lib64/imlib2/loaders/bz2.so
7f03bfb02000-7f03bfb03000 r--p 00001000 08:02 570043                     /usr/lib64/imlib2/loaders/bz2.so
7f03bfb03000-7f03bfb04000 rw-p 00002000 08:02 570043                     /usr/lib64/imlib2/loaders/bz2.so
7f03bfb04000-7f03bfb0c000 r-xp 00000000 08:02 503897                     /usr/lib64/libgif.so.4.1.6
7f03bfb0c000-7f03bfd0b000 ---p 00008000 08:02 503897                     /usr/lib64/libgif.so.4.1.6
7f03bfd0b000-7f03bfd0c000 r--p 00007000 08:02 503897                     /usr/lib64/libgif.so.4.1.6
7f03bfd0c000-7f03bfd0d000 rw-p 00008000 08:02 503897                     /usr/lib64/libgif.so.4.1.6
7f03bfd0d000-7f03bfd0f000 r-xp 00000000 08:02 570042                     /usr/lib64/imlib2/loaders/gif.so
7f03bfd0f000-7f03bff0e000 ---p 00002000 08:02 570042                     /usr/lib64/imlib2/loaders/gif.so
7f03bff0e000-7f03bff0f000 r--p 00001000 08:02 570042                     /usr/lib64/imlib2/loaders/gif.so
7f03bff0f000-7f03bff10000 rw-p 00002000 08:02 570042                     /usr/lib64/imlib2/loaders/gif.so
7f03bff10000-7f03bff23000 r-xp 00000000 08:02 502114                     /usr/lib64/libid3tag.so.0.3.0
7f03bff23000-7f03c0123000 ---p 00013000 08:02 502114                     /usr/lib64/libid3tag.so.0.3.0
7f03c0123000-7f03c0125000 r--p 00013000 08:02 502114                     /usr/lib64/libid3tag.so.0.3.0
7f03c0125000-7f03c0126000 rw-p 00015000 08:02 502114                     /usr/lib64/libid3tag.so.0.3.0
7f03c0126000-7f03c0129000 r-xp 00000000 08:02 570062                     /usr/lib64/imlib2/loaders/id3.so
7f03c0129000-7f03c0328000 ---p 00003000 08:02 570062                     /usr/lib64/imlib2/loaders/id3.so
7f03c0328000-7f03c0329000 r--p 00002000 08:02 570062                     /usr/lib64/imlib2/loaders/id3.so
7f03c0329000-7f03c032a000 rw-p 00003000 08:02 570062                     /usr/lib64/imlib2/loaders/id3.so
7f03c032a000-7f03c032c000 r-xp 00000000 08:02 570036                     /usr/lib64/imlib2/loaders/jpeg.so
7f03c032c000-7f03c052b000 ---p 00002000 08:02 570036                     /usr/lib64/imlib2/loaders/jpeg.so
7f03c052b000-7f03c052c000 r--p 00001000 08:02 570036                     /usr/lib64/imlib2/loaders/jpeg.so
7f03c052c000-7f03c052d000 rw-p 00002000 08:02 570036                     /usr/lib64/imlib2/loaders/jpeg.so
7f03c052d000-7f03c0530000 r-xp 00000000 08:02 570053                     /usr/lib64/imlib2/loaders/lbm.so
7f03c0530000-7f03c072f000 ---p 00003000 08:02 570053                     /usr/lib64/imlib2/loaders/lbm.so
7f03c072f000-7f03c0730000 r--p 00002000 08:02 570053                     /usr/lib64/imlib2/loaders/lbm.so
7f03c0730000-7f03c0731000 rw-p 00003000 08:02 570053                     /usr/lib64/imlib2/loaders/lbm.so
7f03c0731000-7f03c0756000 r-xp 00000000 08:02 503454                     /usr/lib64/libpng12.so.0.37.0
7f03c0756000-7f03c0955000 ---p 00025000 08:02 503454                     /usr/lib64/libpng12.so.0.37.0
7f03c0955000-7f03c0956000 r--p 00024000 08:02 503454                     /usr/lib64/libpng12.so.0.37.0
7f03c0956000-7f03c0957000 rw-p 00025000 08:02 503454                     /usr/lib64/libpng12.so.0.37.0
7f03c0957000-7f03c095a000 r-xp 00000000 08:02 570040                     /usr/lib64/imlib2/loaders/png.so
7f03c095a000-7f03c0b59000 ---p 00003000 08:02 570040                     /usr/lib64/imlib2/loaders/png.so
7f03c0b59000-7f03c0b5a000 r--p 00002000 08:02 570040                     /usr/lib64/imlib2/loaders/png.so
7f03c0b5a000-7f03c0b5b000 rw-p 00003000 08:02 570040                     /usr/lib64/imlib2/loaders/png.so
7f03c0b5b000-7f03c0b5e000 r-xp 00000000 08:02 570057                     /usr/lib64/imlib2/loaders/pnm.so
7f03c0b5e000-7f03c0d5d000 ---p 00003000 08:02 570057                     /usr/lib64/imlib2/loaders/pnm.so
7f03c0d5d000-7f03c0d5e000 r--p 00002000 08:02 570057                     /usr/lib64/imlib2/loaders/pnm.so
Program received signal SIGABRT, Aborted.
0x00007f03c3f3ef25 in raise (sig=<value optimized out>)
    at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
64	../nptl/sysdeps/unix/sysv/linux/raise.c: No such file or directory.
	in ../nptl/sysdeps/unix/sysv/linux/raise.c
(gdb) bt 
#0  0x00007f03c3f3ef25 in raise (sig=<value optimized out>)
    at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
#1  0x00007f03c3f402c0 in abort () at abort.c:88
#2  0x00007f03c3f7a238 in __libc_message (do_abort=2, 
    fmt=0x7f03c4028b77 "*** %s ***: %s terminated\n")
    at ../sysdeps/unix/sysv/linux/libc_fatal.c:170
#3  0x00007f03c3ff04e7 in __fortify_fail (msg=0x7f03c4028b37 "buffer overflow detected")
    at fortify_fail.c:32
#4  0x00007f03c3fee320 in __chk_fail () at chk_fail.c:29
#5  0x00007f03c3fed8db in ___vsnprintf_chk (s=0x1e10927 "", maxlen=26038, flags=1, 
    slen=18446744073709551615, format=0x415a9b "motionnotify %d %d\n", args=0x7fff186ec5b0)
    at vsnprintf_chk.c:39
#6  0x0000000000413d32 in event (format=0x415a9b "motionnotify %d %d\n")
    at /usr/include/bits/stdio2.h:78
#7  0x0000000000407caa in adesklets_events_loop () at adesklets.c:2930
#8  0x00000000004065c5 in main (argc=2, argv=0x7fff186ec9b8) at main.c:104

Current workaround is to disable _FORTIFY_SOURCE, e.g. by creating /etc/portage/env/x11-misc/adesklets file with the following contents:

CFLAGS="${CFLAGS} -U_FORTIFY_SOURCE"
CXXFLAGS="${CFLAGS}"
Comment 1 Peter Volkov (RETIRED) gentoo-dev 2009-09-08 11:11:52 UTC
Created attachment 203475 [details]
full backtrace
Comment 2 Peter Volkov (RETIRED) gentoo-dev 2009-09-08 11:12:22 UTC
emerge --info:

Portage 2.1.6.13 (default/linux/amd64/2008.0, gcc-4.3.4, glibc-2.10.1-r0, 2.6.31-rc2 x86_64)
=================================================================
System uname: Linux-2.6.31-rc2-x86_64-Intel-R-_Core-TM-2_Duo_CPU_L7500_@_1.60GHz-with-gentoo-2.0.1
Timestamp of tree: Tue, 08 Sep 2009 07:00:01 +0000
ccache version 2.4 [enabled]
app-shells/bash:     3.2_p39
dev-java/java-config: 2.1.8-r1
dev-lang/python:     2.6.2-r1
dev-util/ccache:     2.4-r7
dev-util/cmake:      2.6.4
sys-apps/baselayout: 2.0.1
sys-apps/openrc:     0.4.3-r3
sys-apps/sandbox:    1.6-r2
sys-devel/autoconf:  2.13, 2.63-r1
sys-devel/automake:  1.7.9-r1, 1.9.6-r2, 1.10.2
sys-devel/binutils:  2.18-r3
sys-devel/gcc-config: 1.4.1
sys-devel/libtool:   2.2.6a
virtual/os-headers:  2.6.27-r2
ACCEPT_KEYWORDS="amd64"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-O2 -pipe -march=native -mtune=native -ggdb"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c /etc/udev/rules.d"
CXXFLAGS="-O2 -pipe -march=native -mtune=native -ggdb"
DISTDIR="/vt/portage/distfiles"
EMERGE_DEFAULT_OPTS="--with-bdeps y"
FEATURES="buildpkg ccache collisioin-protect distlocks fixpackages parallel-fetch protect-owned sandbox sfperms splitdebug strict unmerge-orphans userfetch"
GENTOO_MIRRORS="http://distfiles.gentoo.org http://distro.ibiblio.org/pub/linux/distributions/gentoo"
LANG="ru_RU.UTF-8"
LDFLAGS="-Wl,--as-needed"
LINGUAS="ru en en_GB en_US"
PKGDIR="/vt/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/vt/portage/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/overlays/pva /usr/local/portage/x11"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="X acl acpi alsa amd64 applet beagle bluetooth bzip2 cairo caps cleartype cli cracklib crypt cups curl dbus dga djvu dri dvi eds encode espeak exif fam ffmpeg flac fontconfig ftp gif gimp glitz gnome-keyring gphoto2 gs gstreamer gtk hal iconv icu imagemagick ipv6 isdnlog ithreads jbig jpeg jpeg2k laptop latex libnotify lzo mmx mng mp3 mtp mudflap multilib ncurses networkmanager nls nptl nptlonly nsplugin ntp opengl openmp pam pcre pda png policykit pppd pronounce readline reflection rle sasl session smi smp spell spl sse sse2 ssl ssse3 startup-notification svg sysfs theora threads thunar tiff truetype unicode usb vorbis wma xcb xcomposite xorg xpm xv xvid zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CAMERAS="canon" ELIBC="glibc" INPUT_DEVICES="evdev wacom" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="ru en en_GB en_US" USERLAND="GNU" VIDEO_CARDS="intel"
Unset:  CPPFLAGS, CTARGET, FFLAGS, INSTALL_MASK, LC_ALL, MAKEOPTS, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS
Comment 4 Diego Elio Pettenò (RETIRED) gentoo-dev 2009-12-19 11:57:02 UTC
*** Bug 293447 has been marked as a duplicate of this bug. ***
Comment 5 Michele Noberasco (RETIRED) gentoo-dev 2010-09-03 10:41:03 UTC
Uhm.

adesklets has several bugs open, none of which have been fixed. Package seems dead since 2007, upstream is unresponsive. I think I'll just hard mask this package, pending removal.
Comment 6 S.Fourmanoit 2010-09-06 22:02:45 UTC
(In reply to comment #5)

I support your decision: given it's current state on Gentoo, adesklets should be hard masked, then removed from portage (I am adesklets upstream maintainer).

Thank you for the time you dedicated to my little piece of code.
Comment 7 Michele Noberasco (RETIRED) gentoo-dev 2010-09-07 07:36:17 UTC
(In reply to comment #6)
> I support your decision: given it's current state on Gentoo, adesklets should
> be hard masked, then removed from portage (I am adesklets upstream maintainer).
> Thank you for the time you dedicated to my little piece of code.

Unless, of course, you are interested in helping to resolve these issues; that would make a difference :-)
Comment 8 S.Fourmanoit 2010-09-08 06:43:40 UTC
(In reply to comment #7)

> Unless, of course, you are interested in helping to resolve these issues; that
> would make a difference :-)

No, I wholeheartedly agree with you: it's time to remove adesklets from portage, it's for the better. In fact, I decided to kill upstream to: 

https://sourceforge.net/mailarchive/forum.php?thread_name=alpine.LNX.2.00.1009080201110.9132%40turing&forum_name=adesklets-devel

Again, thank for your gracious involvement over the years, it's been a great pleasure to work with you and the Gentoo community.


Comment 9 Michele Noberasco (RETIRED) gentoo-dev 2010-09-09 10:11:51 UTC
(In reply to comment #8)
> portage, it's for the better. In fact, I decided to kill upstream to: 
It is agreed, then. adesklets is now masked and will be removed entirely in less than a month...
Thanks to your work on adesklets during this time :-)
Comment 10 Michele Noberasco (RETIRED) gentoo-dev 2010-09-09 10:12:34 UTC
Changing summary
Comment 11 Michele Noberasco (RETIRED) gentoo-dev 2010-09-09 10:13:21 UTC
*** Bug 172603 has been marked as a duplicate of this bug. ***
Comment 12 Michele Noberasco (RETIRED) gentoo-dev 2010-09-09 10:13:35 UTC
*** Bug 247532 has been marked as a duplicate of this bug. ***
Comment 13 Michele Noberasco (RETIRED) gentoo-dev 2010-09-09 10:13:44 UTC
*** Bug 317001 has been marked as a duplicate of this bug. ***
Comment 14 Michele Noberasco (RETIRED) gentoo-dev 2010-09-09 10:13:53 UTC
*** Bug 331479 has been marked as a duplicate of this bug. ***
Comment 15 Michele Noberasco (RETIRED) gentoo-dev 2010-10-11 08:55:16 UTC
adesklets is no more.