Bug#882386: avahi-daemon segfaults with txt-record values ending in "="

2020-04-24 Thread Simon McVittie
Control: tags -1 + fixed-upstream pending

On Fri, 10 May 2019 at 16:33:57 +0200, Krzesimir Nowak wrote:
> I'm the last person who changed that code, so I think I'm to blame for the
> crash. I was let know about this bug, so I wrote a fix. Please see the
> following PR on github:
> 
> https://github.com/lathiat/avahi/pull/226

This looks like essentially the same bug as #947891. Your patch was
applied upstream, and there's an essentially equivalent patch queued up
in the packaging git repository already.

smcv



Bug#882386: avahi-daemon segfaults with txt-record values ending in "="

2019-05-10 Thread Krzesimir Nowak
Hi,

I'm the last person who changed that code, so I think I'm to blame for the
crash. I was let know about this bug, so I wrote a fix. Please see the
following PR on github:

https://github.com/lathiat/avahi/pull/226

I suppose you could carry this patch in the package until it gets fixed
upstream.

Cheers,
Krzesimir


Bug#882386: avahi-daemon segfaults with txt-record values ending in "="

2018-06-24 Thread chrysn
Package: avahi-daemon
Version: 0.7-4
Followup-For: Bug #882386

This bug can also occur easily when advertising a WebDAV server that
needs no user name / password on the LAN, or has an empty path because
everything on the server's authority is WebDAV.

-- System Information:
Debian Release: buster/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable'), (1, 
'experimental-debug'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 4.16.0-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_GB:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages avahi-daemon depends on:
ii  adduser3.117
ii  bind9-host [host]  1:9.11.3+dfsg-2
it  dbus   1.12.8-3
ii  libavahi-common3   0.7-4
ii  libavahi-core7 0.7-4
ii  libc6  2.27-3
ii  libcap21:2.25-1.2
ii  libdaemon0 0.14-7
ii  libdbus-1-31.12.8-3
ii  libexpat1  2.2.5-3
ii  lsb-base   9.20170808

Versions of packages avahi-daemon recommends:
ii  libnss-mdns  0.14.1-1

Versions of packages avahi-daemon suggests:
ii  avahi-autoipd  0.7-4

-- no debconf information


signature.asc
Description: PGP signature


Bug#882386: avahi-daemon segfaults with txt-record values ending in "="

2017-11-21 Thread Tor Slettnes
Package: avahi-daemon
Version: 0.7-3
Severity: important

I have a custom service file, "/etc/avahi/services/instrument.service", 
containing the following:

  
+
  | 
  | 
  | 
  |   %h
  |   
  | _abi-instrument._tcp
  | 7000
  | status=Sleeping
  | protocol=
  | experiment=
  | serialnumber=93200
  | product=SeqStudio
  | runid=
  | version=1.1.dev
  | release=1.1.b2
  | build=
  | injection=
  | description=Applied Biosystems(tm) SeqStudio(tm) Genetic 
Analyzer
  |   
  | 
  
+

With this file in place, "avahi-daemon" encounters a segfault starting up:

  > startbit:~# avahi-daemon --debug
  > Process 20682 died: No such process; trying to remove PID file. 
(/run/avahi-daemon//pid)
  > Found user 'avahi' (UID 113) and group 'avahi' (GID 118).
  > Successfully dropped root privileges.
  > avahi-daemon 0.7 starting up.
  > chroot.c: chroot() helper started
  > Successfully called chroot().
  > Successfully dropped remaining capabilities.
  > chroot.c: chroot() helper got command 02
  > Loading service file /services/instrument.service.
  > chroot.c: chroot() helper exiting with return value 0
  > Segmentation fault

However if I remove those "" entries that have no value
after the "=" sign, "avahi-daemon" starts up normally (save for a
bugus warnign about duplicate mDNS stack on this host):

  
+
  | 
  | 
  | 
  |   %h
  |   
  | _abi-instrument._tcp
  | 7000
  | status=Sleeping
  | protocol=
  | experiment=
  | serialnumber=93200
  | product=SeqStudio
  | runid=
  | version=1.1.dev
  | release=1.1.b2
  | build=
  | injection=
  | description=Applied Biosystems(tm) SeqStudio(tm) Genetic 
Analyzer
  |   
  | 
  
+


  > startbit:~# avahi-daemon --debug
  > Process 20846 died: No such process; trying to remove PID file. 
(/run/avahi-daemon//pid)
  > Found user 'avahi' (UID 113) and group 'avahi' (GID 118).
  > Successfully dropped root privileges.
  > avahi-daemon 0.7 starting up.
  > chroot.c: chroot() helper started
  > Successfully called chroot().
  > Successfully dropped remaining capabilities.
  > chroot.c: chroot() helper got command 02
  > Loading service file /services/instrument.service.
  > Loading service file /services/ssh.service.
  > *** WARNING: Detected another IPv4 mDNS stack running on this host. This 
makes mDNS unreliable and is thus not recommended. ***
  > *** WARNING: Detected another IPv6 mDNS stack running on this host. This 
makes mDNS unreliable and is thus not recommended. ***
  > Joining mDNS multicast group on interface enp4s0.IPv6 with address 
fe80::a28c:fdff:fe32:8013.
  > New relevant interface enp4s0.IPv6 for mDNS.
  > Joining mDNS multicast group on interface enp4s0.IPv4 with address 
10.43.32.19.
  > New relevant interface enp4s0.IPv4 for mDNS.
  > Network interface enumeration completed.
  > Registering new address record for fe80::a28c:fdff:fe32:8013 on enp4s0.*.
  > Registering new address record for 10.43.32.19 on enp4s0.IPv4.
  > Server startup complete. Host name is startbit.local. Local service cookie 
is 3029496375.
  > Service "startbit" (/services/ssh.service) successfully established.
  > Service "startbit" (/services/instrument.service) successfully established.


Regards,
-tor


-- System Information:
Debian Release: buster/sid
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'unstable'), (500, 'stable'), 
(500, 'oldstable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.13.0-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages avahi-daemon depends on:
ii  adduser  3.116
ii  bind9-host [host]1:9.10.6+dfsg-5
ii  dbus 1.12.2-1
ii  init-system-helpers  1.51
ii  libavahi-common3 0.7-3
ii  libavahi-core7   0.7-3
ii  libc62.25-1
ii  libcap2  1:2.25-1.1
ii  libdaemon0   0.14-6+b1
ii  libdbus-1-3  1.12.2-1
ii  libexpat12.2.3-2
ii  lsb-base 9.20170808

Versions of packages avahi-daemon recommends:
ii  libnss-mdns  0.10-8

Versions of packages avahi-daemon suggests:
pn  avahi-autoipd  

-- Configuration Files:
/etc/default/avahi-daemon changed:
AVAHI_DAEMON_DETECT_LOCAL=0


-- no debconf information