Bug 59603 – bittorrent: stack smashing attack in function fast_function()

• Status: RESOLVED DUPLICATE of bug 50309
• Product: Gentoo Linux

[Description Adam Chodorowski 2004-08-06 03:53:23 UTC]

When running btdownload* or btlaunchmany*, python will die with the following message just after finishing checking the existing file integrity (right after status is changed to "connecting to peers"):

python: stack smashing attack in function fast_function()

Running bittorrent 3.4.2-r2 and python 2.3.3-r1. Also tried with python 2.3.4, with the same result.


Reproducible: Always
Steps to Reproduce:
1. btdownloadcurses.py something.torrent


Actual Results:  
After checking existing file integrity, python dies with the message:
python: stack smashing attack in function fast_function()

Expected Results:  
Starting to download the file(s).

Portage 2.0.50-r9 (hardened-x86-2004.0, gcc-3.3.3, glibc-2.3.3.20040420-r0,
2.6.7-hardened-r4)
=================================================================
System uname: 2.6.7-hardened-r4 i686 AMD Duron(tm) Processor
Gentoo Base System version 1.4.16
Autoconf: sys-devel/autoconf-2.59-r4
Automake: sys-devel/automake-1.8.3
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CFLAGS="-march=athlon -O3 -fomit-frame-pointer -pipe"
CHOST="i686-pc-linux-gnu"
COMPILER="gcc3"
CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3/share/config
/usr/share/config /var/qmail/control"
CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d"
CXXFLAGS="-march=athlon -O3 -fomit-frame-pointer -pipe"
DISTDIR="/fs/ringhorne/gentoo/distfiles"
FEATURES="autoaddcvs ccache sandbox sfperms strict userpriv"
GENTOO_MIRRORS="http://trumpetti.atm.tut.fi/gentoo http://gentoo.linux.no
http://gentoo.oregonstate.edu http://www.ibiblio.org/pub/Linux/distributions/gentoo"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/fs/ringhorne/gentoo/portage"
PORTDIR_OVERLAY="/fs/ringhorne/gentoo/portage.local"
SYNC="rsync://rsync.europe.gentoo.org/gentoo-portage"
USE="3dnow alsa berkdb cdr crypt dvd encode gif hardened jpeg mmx ncurses nls
oggvorbis oss pam pic pie png quicktime readline rtc ssl tcpd tga theora tiff
truetype x86 zlib"

[Comment 1 Jon Hood (RETIRED) 2004-08-07 08:11:48 UTC]

This seems to be a hardened issue; could you please try python/bittorrent/bittornado with less aggressive CFLAGS and cross your fingers? Normally these types of errors are triggered by some CFLAG.

[Comment 2 Guillaume Destuynder (RETIRED) 2004-08-07 10:16:22 UTC]

What flags did you used to compile python ?
this looks a bit like: http://bugs.gentoo.org/show_bug.cgi?id=50309

[Comment 3 Jon Hood (RETIRED) 2004-08-07 16:46:22 UTC]

Ah! It is a hardened issue; looks like solar is on it and that this is a python/hardened problem, not bittorrent specific.

*** This bug has been marked as a duplicate of 50309 ***