387557 – app-pda/barry-0.17.1: bio crash when built with gcc-4.5.3-r1

Bug 387557 - app-pda/barry-0.17.1: bio crash when built with gcc-4.5.3-r1

Summary: app-pda/barry-0.17.1: bio crash when built with gcc-4.5.3-r1

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	Current packages (show other bugs)
Hardware:	x86 Linux

Importance:	Normal normal (vote)
Assignee:	Ryan Hill (RETIRED)

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:	fortify-source
	Show dependency tree

Reported:	2011-10-18 15:50 UTC by Marc Perrudin
Modified:	2011-11-18 14:17 UTC (History)
CC List:	1 user (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Marc Perrudin 2011-10-18 15:50:22 UTC

Since I upgraded gcc to 4.5.3-r1, bio crash with a buffer overflow.

barrybackup reports that device can't be opened.

Reproducible: Always

Steps to Reproduce:
1./usr/bin/bio -i device -A -o tar -f a_file
2.
3.
Actual Results:  
*** buffer overflow detected ***: /usr/bin/bio terminated
======= Backtrace: =========
/lib/libc.so.6(__fortify_fail+0x50)[0xb7633fb0]
/lib/libc.so.6(+0xe7e1a)[0xb7631e1a]
/lib/libc.so.6(+0xe73b1)[0xb76313b1]
/usr/lib/libtar.so.0(th_finish+0x49)[0xb73f7769]
/usr/lib/libtar.so.0(th_write+0x368)[0xb73f7428]
/usr/lib/libbarrybackup.so.17(+0x42c8)[0xb77d72c8]
/usr/lib/libbarrybackup.so.17(_ZN5Barry6Backup11ParseRecordERKNS_6DBDataEPKNS_10IConverterE+0x395)[0xb77d88b5]
/usr/lib/libbarry.so.17(_ZN5Barry9TeeParser11ParseRecordERKNS_6DBDataEPKNS_10IConverterE+0x7b)[0xb78299fb]
/usr/lib/libbarry.so.17(_ZN5Barry4Pipe9PumpEntryERNS_6ParserEPKNS_10IConverterE+0x3e)[0xb787e23e]
/usr/lib/libbarry.so.17(_ZN5Barry4Pipe10PumpSeriesERNS_6ParserEPKNS_10IConverterE+0x33)[0xb787e293]
/usr/lib/libbarry.so.17(_ZN5Barry4Pipe8PumpFileERNS_6ParserEPKNS_10IConverterE+0x33)[0xb787e2d3]
/usr/bin/bio[0x804ed74]
/usr/bin/bio[0x804f3e6]
/lib/libc.so.6(__libc_start_main+0xe6)[0xb7564146]
/usr/bin/bio[0x804c621]
======= Memory map: ========
08048000-0805f000 r-xp 00000000 fe:00 274823     /usr/bin/bio
0805f000-08060000 r--p 00016000 fe:00 274823     /usr/bin/bio
08060000-08061000 rw-p 00017000 fe:00 274823     /usr/bin/bio
08061000-080a3000 rw-p 00000000 00:00 0          [heap]
b73b2000-b73bc000 r-xp 00000000 fe:00 1532803    /lib/libnss_files-2.12.2.so
b73bc000-b73bd000 r--p 00009000 fe:00 1532803    /lib/libnss_files-2.12.2.so
b73bd000-b73be000 rw-p 0000a000 fe:00 1532803    /lib/libnss_files-2.12.2.so
b73be000-b73c7000 r-xp 00000000 fe:00 1534240    /lib/libnss_nis-2.12.2.so
b73c7000-b73c8000 r--p 00008000 fe:00 1534240    /lib/libnss_nis-2.12.2.so
b73c8000-b73c9000 rw-p 00009000 fe:00 1534240    /lib/libnss_nis-2.12.2.so
b73c9000-b73dc000 r-xp 00000000 fe:00 1534231    /lib/libnsl-2.12.2.so
b73dc000-b73dd000 r--p 00012000 fe:00 1534231    /lib/libnsl-2.12.2.so
b73dd000-b73de000 rw-p 00013000 fe:00 1534231    /lib/libnsl-2.12.2.so
b73de000-b73e0000 rw-p 00000000 00:00 0 
b73e0000-b73e6000 r-xp 00000000 fe:00 1532828    /lib/libnss_compat-2.12.2.so
b73e6000-b73e7000 r--p 00006000 fe:00 1532828    /lib/libnss_compat-2.12.2.so
b73e7000-b73e8000 rw-p 00007000 fe:00 1532828    /lib/libnss_compat-2.12.2.so
b73e8000-b73eb000 rw-p 00000000 00:00 0 
b73eb000-b73f2000 r-xp 00000000 fe:00 1534238    /lib/librt-2.12.2.so
b73f2000-b73f3000 r--p 00006000 fe:00 1534238    /lib/librt-2.12.2.so
b73f3000-b73f4000 rw-p 00007000 fe:00 1534238    /lib/librt-2.12.2.so
b73f4000-b73fc000 r-xp 00000000 fe:00 274038     /usr/lib/libtar.so.0.0.0
b73fc000-b73fd000 r--p 00007000 fe:00 274038     /usr/lib/libtar.so.0.0.0
b73fd000-b73fe000 rw-p 00008000 fe:00 274038     /usr/lib/libtar.so.0.0.0
b73fe000-b7400000 rw-p 00000000 00:00 0 
b7400000-b7503000 r-xp 00000000 fe:00 275927     /usr/lib/libglib-2.0.so.0.2800.8
b7503000-b7504000 r--p 00102000 fe:00 275927     /usr/lib/libglib-2.0.so.0.2800.8
b7504000-b7505000 rw-p 00103000 fe:00 275927     /usr/lib/libglib-2.0.so.0.2800.8
b7505000-b7529000 r-xp 00000000 fe:00 1534241    /lib/libm-2.12.2.so
b7529000-b752a000 r--p 00023000 fe:00 1534241    /lib/libm-2.12.2.so
b752a000-b752b000 rw-p 00024000 fe:00 1534241    /lib/libm-2.12.2.so
b752b000-b752c000 rw-p 00000000 00:00 0 
b752c000-b753f000 r-xp 00000000 fe:00 1532045    /lib/libz.so.1.2.5
b753f000-b7540000 r--p 00012000 fe:00 1532045    /lib/libz.so.1.2.5
b7540000-b7541000 rw-p 00013000 fe:00 1532045    /lib/libz.so.1.2.5
b7541000-b7547000 r-xp 00000000 fe:00 1532091    /lib/libusb-0.1.so.4.4.4
b7547000-b7548000 r--p 00005000 fe:00 1532091    /lib/libusb-0.1.so.4.4.4
b7548000-b754a000 rw-p 00006000 fe:00 1532091    /lib/libusb-0.1.so.4.4.4
b754a000-b76a5000 r-xp 00000000 fe:00 1532820    /lib/libc-2.12.2.so
b76a5000-b76a7000 r--p 0015a000 fe:00 1532820    /lib/libc-2.12.2.so
b76a7000-b76a8000 rw-p 0015c000 fe:00 1532820    /lib/libc-2.12.2.so
b76a8000-b76ab000 rw-p 00000000 00:00 0 
b76ab000-b76c4000 r-xp 00000000 fe:00 1403649    /usr/lib/gcc/i686-pc-linux-gnu/4.5.3/libgcc_s.so.1
b76c4000-b76c5000 r--p 00018000 fe:00 1403649    /usr/lib/gcc/i686-pc-linux-gnu/4.5.3/libgcc_s.so.1
b76c5000-b76c6000 rw-p 00019000 fe:00 1403649    /usr/lib/gcc/i686-pc-linux-gnu/4.5.3/libgcc_s.so.1
b76c6000-b77ac000 r-xp 00000000 fe:00 1403644    /usr/lib/gcc/i686-pc-linux-gnu/4.5.3/libstdc++.so.6.0.14
b77ac000-b77b0000 r--p 000e5000 fe:00 1403644    /usr/lib/gcc/i686-pc-linux-gnu/4.5.3/libstdc++.so.6.0.14
b77b0000-b77b1000 rw-p 000e9000 fe:00 1403644    /usr/lib/gcc/i686-pc-linux-gnu/4.5.3/libstdc++.so.6.0.14
b77b1000-b77b9000 rw-p 00000000 00:00 0 
b77b9000-b77cf000 r-xp 00000000 fe:00 1532175    /lib/libpthread-2.12.2.so
b77cf000-b77d0000 r--p 00015000 fe:00 1532175    /lib/libpthread-2.12.2.so
b77d0000-b77d1000 rw-p 00016000 fe:00 1532175    /lib/libpthread-2.12.2.so
b77d1000-b77d3000 rw-p 00000000 00:00 0 
b77d3000-b77dd000 r-xp 00000000 fe:00 275238     /usr/lib/libbarrybackup.so.17.0.1
b77dd000-b77de000 r--p 00009000 fe:00 275238     /usr/lib/libbarrybackup.so.17.0.1
b77de000-b77df000 rw-p 0000a000 fe:00 275238     /usr/lib/libbarrybackup.so.17.0.1
b77df000-b7806000 r-xp 00000000 fe:00 275579     /usr/lib/libbarrysync.so.17.0.1
b7806000-b7807000 r--p 00026000 fe:00 275579     /usr/lib/libbarrysync.so.17.0.1
b7807000-b7808000 rw-p 00027000 fe:00 275579     /usr/lib/libbarrysync.so.17.0.1
b7808000-b78be000 r-xp 00000000 fe:00 274217     /usr/lib/libbarry.so.17.0.1
b78be000-b78c0000 r--p 000b6000 fe:00 274217     /usr/lib/libbarry.so.17.0.1
b78c0000-b78c2000 rw-p 000b8000 fe:00 274217     /usr/lib/libbarry.so.17.0.1
b78c2000-b78c3000 rw-p 00000000 00:00 0 
b78e1000-b78e2000 rw-p 00000000 00:00 0 
b78e2000-b78fe000 r-xp 00000000 fe:00 1534242    /lib/ld-2.12.2.so
b78fe000-b78ff000 r--p 0001c000 fe:00 1534242    /lib/ld-2.12.2.so
b78ff000-b7900000 rw-p 0001d000 fe:00 1534242    /lib/ld-2.12.2.so
bfdc9000-bfdea000 rw-p 00000000 00:00 0          [stack]
ffffe000-fffff000 r-xp 00000000 00:00 0          [vdso]


Expected Results:  
data backup-ed in the file

Portage 2.1.10.11 (default/linux/x86/10.0/desktop/gnome, gcc-4.5.3, glibc-2.12.2-r0, 2.6.39-gentoo-r3 i686)
=================================================================
System uname: Linux-2.6.39-gentoo-r3-i686-AMD_Athlon-tm-_II_X4_645_Processor-with-gentoo-2.0.3
Timestamp of tree: Mon, 17 Oct 2011 00:45:01 +0000
ccache version 2.4 [enabled]
app-shells/bash:          4.1_p9
dev-java/java-config:     2.1.11-r3
dev-lang/python:          2.7.1-r1, 3.1.3-r1
dev-util/ccache:          2.4-r9
dev-util/cmake:           2.8.4-r1
dev-util/pkgconfig:       0.26
sys-apps/baselayout:      2.0.3
sys-apps/openrc:          0.8.3-r1
sys-apps/sandbox:         2.4
sys-devel/autoconf:       2.13, 2.68
sys-devel/automake:       1.9.6-r3, 1.10.3, 1.11.1
sys-devel/binutils:       2.20.1-r1
sys-devel/gcc:            4.4.5, 4.5.3-r1
sys-devel/gcc-config:     1.4.1-r1
sys-devel/libtool:        2.4-r1
sys-devel/make:           3.82-r1
sys-kernel/linux-headers: 2.6.36.1 (virtual/os-headers)
sys-libs/glibc:           2.12.2
Repositories: gentoo vdr-xine vdr-devel x-portage
ACCEPT_KEYWORDS="x86"
ACCEPT_LICENSE="* -@EULA dlj-1.1 AdobeFlash-10.1"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-march=native -O2 -pipe"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/share/gnupg/qualified.txt /usr/share/openvpn/easy-rsa /var/bind"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo"
CXXFLAGS="-march=native -O2 -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="assume-digests binpkg-logs buildpkg ccache distlocks ebuild-locks fixlafiles fixpackages news parallel-fetch protect-owned sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch"
FFLAGS=""
GENTOO_MIRRORS="http://distfiles.gentoo.org"
LANG="fr_FR.UTF-8"
LDFLAGS="-Wl,-O1 -Wl,--as-needed"
LINGUAS="fr en"
MAKEOPTS="-j1"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_EXTRA_OPTS="-q"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/var/lib/layman/vdr-xine /var/lib/layman/vdr-devel /usr/local/portage"
SYNC="rsync://rsync.europe.gentoo.org/gentoo-portage"
USE="3dnow 3dnowext X a52 aac acl acpi alsa bash-completion berkdb branding bzip2 cairo cdda cdparanoia cdr cleartype cli consolekit corefonts cracklib crypt cups cxx dbus dri dts dvb dvd dvdr emboss encode evo exif fam ffmpeg firefox flac fortran gdbm gdu gif gnome gnome-keyring gnutls gpm gstreamer gtk iconv idn imagemagick jpeg lcms libg++ libnotify lirc mad matroska mikmod mmx mmxext mng modules mp3 mp4 mpeg mudflap nautilus ncurses nls nptl nptlonly ogg opengl openmp pam pango pcre pdf pdflib perl png pnm policykit ppds pppd pulseaudio python quicktime readline rss sdl session smp spell sse sse2 sse4a ssl startup-notification svg sysfs tcpd theora threads tiff truetype twolame type1 udev unicode usb v4l2 vdpau vim-syntax vorbis win32codecs wma x264 x86 xcb xml xorg xosd xulrunner xv xvid zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1 emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="kexi words flow plan stage tables krita karbon braindump" CAMERAS="ptp2" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" DVB_CARDS="usb-af9015" ELIBC="glibc" FOO2ZJS_DEVICES="sa3175" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ubx" INPUT_DEVICES="evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="fr en" LIRC_DEVICES="devinput" NETBEANS_MODULES="cnd" PHP_TARGETS="php5-3" QEMU_SOFTMMU_TARGETS="i386 x86_64" QEMU_USER_TARGETS="i386 x86_64" RUBY_TARGETS="ruby18" SANE_BACKENDS="xerox_mfp" USERLAND="GNU" VIDEO_CARDS="nv nvidia" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account"
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LC_ALL, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS

Comment 1 Marc Perrudin 2011-11-18 14:17:04 UTC

I figured out where is the problem. It's a known bug of libtar (see http://sourceforge.net/tracker/?func=detail&aid=3073404&group_id=153722&atid=788904 ).

It is already fixed in dev-libs/libtar-1.2.11-r4.

Regards.