Package: autoconf
Version: 2.69-10
Severity: normal

Dear Maintainer,

the mmap() detection code in /usr/share/autoconf/autoconf/functions.m4 doesn't
free() the allocated memory. Consequently a ./configure run fails when leak
or address sanitizers are enabled.

>From config.log (the relevant compiler flag is -fsanitize=address):

##############
configure:49549: checking for working mmap
configure:49696: clang-5.0 -o conftest -I/usr/local/include     
-I/usr/include/p11-kit-1 -DNDEBUG -O1 -fno-omit-frame-pointer 
-gline-tables-only -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION 
-fsanitize=address -fsanitize-address-use-after-scope 
-fsanitize-coverage=trace-pc-guard,trace-cmp   conftest.c -lunistring -lidn2 
-L/usr/local/lib -lbrotlidec -llzma -lz -lbz2 -lnghttp2 -lpsl -lgnutls  >&5
configure:49696: $? = 0
configure:49696: ./conftest

=================================================================
==23695==ERROR: LeakSanitizer: detected memory leaks

Direct leak of 4096 byte(s) in 1 object(s) allocated from:
    #0 0x4d5498 in malloc (/usr/oms/src/wget2/conftest+0x4d5498)
    #1 0x50b85c in main /usr/oms/src/wget2/conftest.c:829:20
    #2 0x7fe0be4ac2b0 in __libc_start_main 
(/lib/x86_64-linux-gnu/libc.so.6+0x202b0)

SUMMARY: AddressSanitizer: 4096 byte(s) leaked in 1 allocation(s).
configure:49696: $? = 1
configure: program exited with status 1
#############

Regards, Tim


-- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.9.0-3-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL 
set to en_US.UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set 
to en_US.UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages autoconf depends on:
ii  debianutils  4.8.1.1
ii  m4           1.4.18-1
ii  perl         5.24.1-4

Versions of packages autoconf recommends:
ii  automake [automaken]      1:1.15.1-1
ii  automake1.10 [automaken]  1:1.10.3-3.1
ii  automake1.6 [automaken]   1.6.3-12
ii  automake1.9 [automaken]   1.9.6+nogfdl-4

Versions of packages autoconf suggests:
ii  autoconf-archive  20160916-1
pn  autoconf-doc      <none>
ii  gettext           0.19.8.1-2
ii  gnu-standards     2010.03.11-1
ii  libtool           2.4.6-2

-- no debconf information

Reply via email to