Your message dated Fri, 13 Jun 2008 03:47:03 +0000
with message-id <[EMAIL PROTECTED]>
and subject line Bug#481578: fixed in unhide 20080519-1
has caused the Debian Bug report #481578,
regarding unhide: Ignoring SIGCHLD gives tons of false positives
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [EMAIL PROTECTED]
immediately.)
--
481578: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=481578
Debian Bug Tracking System
Contact [EMAIL PROTECTED] with problems
--- Begin Message ---
Package: unhide
Version: 20071102-2
Severity: important
Tags: patch
"unhide sys" works like this:
* Do a syscall on a PID.
* If that PID exists:
* Launch ps using popen()
* Verify that the PID is listed
* Close the popen()ed stream with pclose()
* pclose() implicitly calls wait() to make sure the ps process has finished.
However, since the main() function does signal(SIGCHLD, SIG_IGN), the wait()
call will just return ECHILD, regardless of
whether ps has finished or not.
Then, the next syscall finds the ps process that is still alive. But before
launching the next ps process, the previous
one dies. And we have a hidden process!
Since this is a race, it behaves erratically, but I sometimes get a list of
over 20 hidden processes this way. This got
much more obvious after upgrading from 2.6.22 to 2.6.24.
Will attach patch, as well as strace output demonstrating the problem.
As it is now, I can't use unhide.
Regards //Johan
-- System Information:
Debian Release: lenny/sid
APT prefers testing
APT policy: (990, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.6.24-1-686 (SMP w/2 CPU cores)
Locale: LANG=sv_SE.UTF-8, LC_CTYPE=sv_SE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
-- no debconf information
diff -ur unhide-20071102.orig/unhide-linux26.c unhide-20071102/unhide-linux26.c
--- unhide-20071102.orig/unhide-linux26.c 2007-11-12 22:23:39.000000000 +0100
+++ unhide-20071102/unhide-linux26.c 2008-05-17 09:53:11.000000000 +0200
@@ -466,8 +466,6 @@
int main (int argc, char *argv[]) {
- signal(SIGCHLD, SIG_IGN);
-
printf ("Unhide 02-11-2007 \n") ;
printf ("[EMAIL PROTECTED]") ;
--- End Message ---
--- Begin Message ---
Source: unhide
Source-Version: 20080519-1
We believe that the bug you reported is fixed in the latest version of
unhide, which is due to be installed in the Debian FTP archive:
unhide_20080519-1.diff.gz
to pool/main/u/unhide/unhide_20080519-1.diff.gz
unhide_20080519-1.dsc
to pool/main/u/unhide/unhide_20080519-1.dsc
unhide_20080519-1_amd64.deb
to pool/main/u/unhide/unhide_20080519-1_amd64.deb
unhide_20080519.orig.tar.gz
to pool/main/u/unhide/unhide_20080519.orig.tar.gz
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Francois Marier <[EMAIL PROTECTED]> (supplier of updated unhide package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Fri, 13 Jun 2008 15:25:27 +1200
Source: unhide
Binary: unhide
Architecture: source amd64
Version: 20080519-1
Distribution: unstable
Urgency: low
Maintainer: Francois Marier <[EMAIL PROTECTED]>
Changed-By: Francois Marier <[EMAIL PROTECTED]>
Description:
unhide - Forensic tool to find hidden processes and ports
Closes: 481578
Changes:
unhide (20080519-1) unstable; urgency=low
.
* New upstream release (closes: #481578)
* Bump Standards-Version to 3.8.0
* Bump debhelper compatibility to 6
Checksums-Sha1:
e370486aee9312ecb942b2300b0d5bec6f56bbe1 1142 unhide_20080519-1.dsc
81e1f2c40128428eb072ac52b10d522dfac1e8ad 22141 unhide_20080519.orig.tar.gz
344cfa05eea0b6630b48fc5f762cf488b362cec9 3997 unhide_20080519-1.diff.gz
f9c6011f597762d99faac9f493d93179d5383759 764290 unhide_20080519-1_amd64.deb
Checksums-Sha256:
2a79e8990de14958edaa6b4041fa701801e51060339255a6394d4b386a500e96 1142
unhide_20080519-1.dsc
35fdcf1e3bf67c796f8422e0e15162b8034abb7ca126cf8bb59e262f013d1525 22141
unhide_20080519.orig.tar.gz
2b1737067f4e05cf587f2f35bc345f61dfacddf475fb0c4805c34a5050116a85 3997
unhide_20080519-1.diff.gz
7fc78e298386ab8e8985361d118eb03e73ec6becc0a2068ec525036fd79b12b7 764290
unhide_20080519-1_amd64.deb
Files:
704d50c1a51c31fe9f308d9dd3a70c1e 1142 admin extra unhide_20080519-1.dsc
ec4587e31d07e5ba91cc30c909f47da1 22141 admin extra unhide_20080519.orig.tar.gz
ca8f4354a1c7f3edf448a62a4789ced3 3997 admin extra unhide_20080519-1.diff.gz
9b221f759be758d55d60529c8e392b65 764290 admin extra unhide_20080519-1_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEARECAAYFAkhR6QEACgkQScUZKBnQNIaVqgCeKY7yrGvukqJ6BSpyI05U6xQS
EDEAn2HztwlW7caukwqTIqFS3zZBSOMn
=eSXV
-----END PGP SIGNATURE-----
--- End Message ---
