On 8/4/20 8:35 PM, Alexey Orishko via blfs-support wrote:
Hi guys,
Just got a system running v.9.1 and decided to check dmesg.
Unfortunately I saw vsftpd segfault:
[ 50.395920] vsftpd[685]: segfault at 0 ip 00007f87cf2676aa sp
00007ffe2ab68e48 error 4 in libc-2.31.so[7f87cf133000+149000]
[ 50.395928] Code: 80 7e 10 00 0f 84 f9 fe ff ff e9 81 d7 f4 ff 90
89 f8 31 d2 c5 c5 ef ff 09 f0 25 ff 0f 00 00 3d 80 0f 00 00 0f 8f 56
03 00 00 <c5> fe 6f 0f c5 f5 74 06 c5 fd da c1 c5 fd 74 c7 c5 fd d7 c8
85 c9
[ 55.445194] vsftpd[687]: segfault at 0 ip 00007f87cf2676aa sp
00007ffe2ab68e48 error 4 in libc-2.31.so[7f87cf133000+149000]
[ 55.445209] Code: 80 7e 10 00 0f 84 f9 fe ff ff e9 81 d7 f4 ff 90
89 f8 31 d2 c5 c5 ef ff 09 f0 25 ff 0f 00 00 3d 80 0f 00 00 0f 8f 56
03 00 00 <c5> fe 6f 0f c5 f5 74 06 c5 fd da c1 c5 fd 74 c7 c5 fd d7 c8
85 c9
After a few test attempts I found that it happens when wrong password
for existing user provided in the client application. I assume the
fault is in vsftpd and not in glibc. The same scenario in Ubuntu does
not lead to segfault (same version of the app and lib but might have
canonical patches).
Server works even after segfault and I can do ftp with a correct
credentials, but it is uncomfortable to have a system with such a
flaw. Last version was released 5 years ago and I wonder if it is
maintained or left for good.. Is there any place to report bugs for
vsftpd?
Any suggestions are welcome.
vsftpd was released in 2015. That is still current as far as I can
tell. I do not see anything in google about a problem with this version.
If you can't figure it out, you might want to try proftpd.
-- Bruce
--
http://lists.linuxfromscratch.org/listinfo/blfs-support
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page
