Bug#783723: cruft-ng: Cruft dies with stack-smashing attack error

[Alexandre Detiste]

Thanks for the strace !

I can now reproduce this, by setting my local to either 'C' or
en_US.UTF8 as yours; this will help me track this bug.

Of course, It works for me,
with LANG=fr_BE.UTF-8 LANGUAGE=fr_BE:fr;
but that won't help you much.

Alexandre


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#783723: cruft-ng: Cruft dies with stack-smashing attack error

[Alexandre Detiste]

Le mercredi 29 avril 2015 09:48:25, vous avez écrit :
 
 I installed cruft-ng and ran it after installing with no configuration.
Indeed, there is nothing to configure.

 cat: /var/spool/cruft/IGNORES: No such file or directory
Harmless, fixed in pending cruft-common upload.

 Here's the failure:
 
 cerberus:/home/jlquinn/Desktop# cruft-ng
 cruft report: Wed Apr 29 09:42:27 EDT 2015
 *** stack smashing detected ***: cruft-ng terminated

I can't reproduce this.

I've no idea with which version of gcc/libstdc++ etc...
this was compiled back in november.

Can you maybe try the i386 version ?
This one has be compiled by Debian build daemon.

tchet@antec:/tmp$ dpkg -c cruft-ng_0.1_amd64.deb | grep /usr/bin/
-rwxr-xr-x root/root 60008 2014-11-28 07:20 ./usr/bin/cruft-ng
tchet@antec:/tmp$ dpkg -c cruft-ng_0.1_i386.deb | grep /usr/bin/
-rwxr-xr-x root/root 54928 2015-04-28 21:00 ./usr/bin/cruft-ng

You could also consider downloading the source,
(git clone https://github.com/a-detiste/cruft-ng.git)
the run make tests and run the individual
test_mlocate test_explain test_filters
to narrow down the problem.

Or rerun cruft-ng through strace.

Alexandre Detiste


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#783723: cruft-ng: Cruft dies with stack-smashing attack error

[Jerry Quinn]

Package: cruft-ng
Version: 0.1
Severity: grave
Justification: renders package unusable

Dear Maintainer,

I installed cruft-ng and ran it after installing with no configuration.
Here's the failure:

cerberus:/home/jlquinn/Desktop# cruft-ng
cruft report: Wed Apr 29 09:42:27 EDT 2015

cat: /var/spool/cruft/IGNORES: No such file or directory
*** stack smashing detected ***: cruft-ng terminated
=== Backtrace: =
/lib/x86_64-linux-gnu/libc.so.6(+0x731ff)[0x7f69abe211ff]
/lib/x86_64-linux-gnu/libc.so.6(__fortify_fail+0x37)[0x7f69abea44c7]
/lib/x86_64-linux-gnu/libc.so.6(__fortify_fail+0x0)[0x7f69abea4490]
cruft-ng[0x40588d]
cruft-ng[0x403e48]
/lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf5)[0x7f69abdcfb45]
cruft-ng[0x4053ff]
=== Memory map: 
0040-0040e000 r-xp  09:02 24641550
/usr/bin/cruft-ng
0060d000-0060e000 r--p d000 09:02 24641550
/usr/bin/cruft-ng
0060e000-0060f000 rw-p e000 09:02 24641550
/usr/bin/cruft-ng
0147e000-0a268000 rw-p  00:00 0
[heap]
7f69aafab000-7f69ab7ac000 rw-p  00:00 0
7f69abdae000-7f69abf4d000 r-xp  09:02 24380218
/lib/x86_64-linux-gnu/libc-2.19.so
7f69abf4d000-7f69ac14d000 ---p 0019f000 09:02 24380218
/lib/x86_64-linux-gnu/libc-2.19.so
7f69ac14d000-7f69ac151000 r--p 0019f000 09:02 24380218
/lib/x86_64-linux-gnu/libc-2.19.so
7f69ac151000-7f69ac153000 rw-p 001a3000 09:02 24380218
/lib/x86_64-linux-gnu/libc-2.19.so
7f69ac153000-7f69ac157000 rw-p  00:00 0
7f69ac157000-7f69ac16d000 r-xp  09:02 24379645
/lib/x86_64-linux-gnu/libgcc_s.so.1
7f69ac16d000-7f69ac36c000 ---p 00016000 09:02 24379645
/lib/x86_64-linux-gnu/libgcc_s.so.1
7f69ac36c000-7f69ac36d000 rw-p 00015000 09:02 24379645
/lib/x86_64-linux-gnu/libgcc_s.so.1
7f69ac36d000-7f69ac46d000 r-xp  09:02 24380165
/lib/x86_64-linux-gnu/libm-2.19.so
7f69ac46d000-7f69ac66c000 ---p 0010 09:02 24380165
/lib/x86_64-linux-gnu/libm-2.19.so
7f69ac66c000-7f69ac66d000 r--p 000ff000 09:02 24380165
/lib/x86_64-linux-gnu/libm-2.19.so
7f69ac66d000-7f69ac66e000 rw-p 0010 09:02 24380165
/lib/x86_64-linux-gnu/libm-2.19.so
7f69ac66e000-7f69ac75a000 r-xp  09:02 29098851
/usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.20
7f69ac75a000-7f69ac95a000 ---p 000ec000 09:02 29098851
/usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.20
7f69ac95a000-7f69ac962000 r--p 000ec000 09:02 29098851
/usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.20
7f69ac962000-7f69ac964000 rw-p 000f4000 09:02 29098851
/usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.20
7f69ac964000-7f69ac979000 rw-p  00:00 0
7f69ac979000-7f69ac999000 r-xp  09:02 24380071
/lib/x86_64-linux-gnu/ld-2.19.so
7f69acb5f000-7f69acb64000 rw-p  00:00 0
7f69acb95000-7f69acb99000 rw-p  00:00 0
7f69acb99000-7f69acb9a000 r--p 0002 09:02 24380071
/lib/x86_64-linux-gnu/ld-2.19.so
7f69acb9a000-7f69acb9b000 rw-p 00021000 09:02 24380071
/lib/x86_64-linux-gnu/ld-2.19.so
7f69acb9b000-7f69acb9c000 rw-p  00:00 0
7ffcd1e48000-7ffcd1e69000 rw-p  00:00 0
[stack]
7ffcd1e9a000-7ffcd1e9c000 r-xp  00:00 0
[vdso]
7ffcd1e9c000-7ffcd1e9e000 r--p  00:00 0
[vvar]
ff60-ff601000 r-xp  00:00 0
[vsyscall]
Aborted
cerberus:/home/jlquinn/Desktop#



-- System Information:
Debian Release: 8.0
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable'), (500, 'stable'), (1, 
'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-4-amd64 (SMP w/16 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages cruft-ng depends on:
ii  cruft   0.9.19
ii  libc6   2.19-15
ii  libgcc1 1:4.9.2-10
ii  libstdc++6  4.9.2-10
ii  mlocate 0.26-1

cruft-ng recommends no packages.

cruft-ng suggests no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org