Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 903860 - app-editors/pluma crashes on hardened / FORTIFY_SOURCE=3
Summary: app-editors/pluma crashes on hardened / FORTIFY_SOURCE=3
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo MATE Desktop
URL: https://github.com/mate-desktop/pluma...
Whiteboard:
Keywords: PATCH
Depends on:
Blocks: 847148
  Show dependency tree
 
Reported: 2023-04-05 08:18 UTC by Alexander van der Meij
Modified: 2023-04-11 02:44 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
gdb crash backtrace (pluma-crash-bt,1.39 KB, patch)
2023-04-05 08:19 UTC, Alexander van der Meij
Details | Diff
out-of-bounds-fix-patch (1.26-Fix-out-of-bounds-write.patch,964 bytes, patch)
2023-04-05 08:20 UTC, Alexander van der Meij
Details | Diff
updated ebuild that includes patch (pluma-1.26.0-r1.ebuild,1.88 KB, text/plain)
2023-04-05 08:20 UTC, Alexander van der Meij
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Alexander van der Meij 2023-04-05 08:18:12 UTC
Back on my favorite Linux distribution using a hardened profile. MATE Desktop is running great with one exception; pluma crashes whenever I use a keyboard shortcut. The following output appears in the terminal:

alexander@deepthought ~/Desktop $ pluma
*** buffer overflow detected ***: terminated
Aborted

This is a known issue that is described and fixed here: 
https://github.com/mate-desktop/pluma/issues/664

Attached to this bug is a full backtrace, the patch to fix the problem from the bug report above and an updated ebuild.

Reproducible: Always

Steps to Reproduce:
1. Compile pluma with hardened profile
2. Open pluma and press CTRL+S to save document
3. Observe crash
Comment 1 Alexander van der Meij 2023-04-05 08:19:09 UTC
Created attachment 859531 [details, diff]
gdb crash backtrace
Comment 2 Alexander van der Meij 2023-04-05 08:20:28 UTC
Created attachment 859532 [details, diff]
out-of-bounds-fix-patch
Comment 3 Alexander van der Meij 2023-04-05 08:20:47 UTC
Created attachment 859533 [details]
updated ebuild that includes patch
Comment 4 Larry the Git Cow gentoo-dev 2023-04-11 02:44:52 UTC
The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=9ca63fb29f80c52ea7863d1b418e7c36abd6166f

commit 9ca63fb29f80c52ea7863d1b418e7c36abd6166f
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2023-04-11 02:43:08 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2023-04-11 02:44:41 +0000

    app-editors/pluma: fix crash w/ FORTIFY_SOURCE=3
    
    Closes: https://bugs.gentoo.org/903860
    Signed-off-by: Sam James <sam@gentoo.org>

 .../files/pluma-1.26.0-fortify-source-3.patch      | 24 +++++++
 app-editors/pluma/pluma-1.26.0-r1.ebuild           | 83 ++++++++++++++++++++++
 2 files changed, 107 insertions(+)