Hi, I have contacted the upstream author, Ben Greear, about this problem. And he requested if you have a back trace?
> I would be interested in seeing a backtrace if the user has
it
> so I could better understand the problem. Maybe the code should
never
> actually be trying to call these methods if _root is NULL?
Can you help the author?
Kind regards
Jose M Calhariz
On 09/01/17 18:42, Dhionel Díaz wrote:
> Package: xorp
> Version: 1.8.6~wip.20160715-2
> Severity: important
> Tags: patch
>
> Dear Maintainer,
>
> The xorp initialization process was generating segfaults in
> libxorp_rib.so because of null pointer dereferences. After some
> research, it seems that this was a latent bug that was exposed by an
> optimizer improvement included in gcc 6 ("Value range propagation now
> assumes that the this pointer of C++ member functions is non-null").
>
> The attached patch adds some null pointer checks which seem to solve the
> problem, at least for a multicast routing deployment.
>
> On the other hand, the patch also changes a line in debian/rules in
> order to complete the incorporation of hardened build flags. This is
> required because the SCons build system uses the, perhaps somewhat
> unusual, LINKFLAGS variable name for the linker flags.
>
> Some limited testing has been performed in a production router, I hope
> the patch can be useful.
>
> Regards,
>
>
> -- System Information:
> Debian Release: stretch/sid
> APT prefers testing
> APT policy: (500, 'testing')
> Architecture: amd64 (x86_64)
>
> Kernel: Linux 4.8.0-2-amd64 (SMP w/1 CPU core)
> Locale: LANG=es_VE.UTF-8, LC_CTYPE=es_VE.UTF-8 (charmap=UTF-8)
> Shell: /bin/sh linked to /bin/dash
> Init: systemd (via /run/systemd/system)
>
> Versions of packages xorp depends on:
> ii adduser 3.115
> ii init-system-helpers 1.46
> ii libc6 2.24-8
> ii libgcc1 1:6.2.1-5
> ii libncurses5 6.0+20161126-1
> ii libpcap0.8 1.8.1-3
> ii libssl1.1 1.1.0c-2
> ii libstdc++6 6.2.1-5
> ii libsystemd0 232-8
> ii libtinfo5 6.0+20161126-1
>
> Versions of packages xorp recommends:
> ii iputils-ping 3:20161105-1
> ii iputils-tracepath 3:20161105-1
> ii traceroute 1:2.1.0-2
>
> xorp suggests no packages.
>
> -- Configuration Files:
> /etc/default/xorp changed [not included]
> /etc/xorp/config.boot changed [not included]
>
> -- no debconf information
>
>
signature.asc
Description: OpenPGP digital signature

