Hi, I have contacted the upstream author, Ben Greear, about this
problem.  And he requested
if you have a back trace?

> I would be interested in seeing a backtrace if the user has
it                                                                              
                                                                                
              

> so I could better understand the problem.  Maybe the code should
never                                                                           
                                                                                
         

> actually be trying to call these methods if _root is NULL?               

Can you help the author?

Kind regards
Jose M Calhariz


On 09/01/17 18:42, Dhionel Dí­az wrote:
> Package: xorp
> Version: 1.8.6~wip.20160715-2
> Severity: important
> Tags: patch
>
> Dear Maintainer,
>
> The xorp initialization process was generating segfaults in
> libxorp_rib.so because of null pointer dereferences. After some
> research, it seems that this was a latent bug that was exposed by an
> optimizer improvement included in gcc 6 ("Value range propagation now
> assumes that the this pointer of C++ member functions is non-null").
>
> The attached patch adds some null pointer checks which seem to solve the
> problem, at least for a multicast routing deployment.
>
> On the other hand, the patch also changes a line in debian/rules in
> order to complete the incorporation of hardened build flags. This is
> required because the SCons build system uses the, perhaps somewhat
> unusual, LINKFLAGS variable name for the linker flags.
>
> Some limited testing has been performed in a production router, I hope
> the patch can be useful.
>
> Regards,
>
>
> -- System Information:
> Debian Release: stretch/sid
>   APT prefers testing
>   APT policy: (500, 'testing')
> Architecture: amd64 (x86_64)
>
> Kernel: Linux 4.8.0-2-amd64 (SMP w/1 CPU core)
> Locale: LANG=es_VE.UTF-8, LC_CTYPE=es_VE.UTF-8 (charmap=UTF-8)
> Shell: /bin/sh linked to /bin/dash
> Init: systemd (via /run/systemd/system)
>
> Versions of packages xorp depends on:
> ii  adduser              3.115
> ii  init-system-helpers  1.46
> ii  libc6                2.24-8
> ii  libgcc1              1:6.2.1-5
> ii  libncurses5          6.0+20161126-1
> ii  libpcap0.8           1.8.1-3
> ii  libssl1.1            1.1.0c-2
> ii  libstdc++6           6.2.1-5
> ii  libsystemd0          232-8
> ii  libtinfo5            6.0+20161126-1
>
> Versions of packages xorp recommends:
> ii  iputils-ping       3:20161105-1
> ii  iputils-tracepath  3:20161105-1
> ii  traceroute         1:2.1.0-2
>
> xorp suggests no packages.
>
> -- Configuration Files:
> /etc/default/xorp changed [not included]
> /etc/xorp/config.boot changed [not included]
>
> -- no debconf information
>
>


Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to