Bug#812456: davfs2: dies with stack smashing error; can't mount

[Werner Baumann]

Moving from flag -fstack-protector to -fstack-protector-strong finally
forced this old bug to show up.

I fixed the bug (and some others) and released version 1.5.4.
Luciano Bello will update the Debian package soon.

Werner

Bug#812456: davfs2: dies with stack smashing error; can't mount

[Sean Whitton]

Hello,

On Thu, 31 Mar 2016 23:07:58 +0600 Литвинов Евгений  
wrote:
> I had the same error. My file /home/asd/.davfs2/secrets looked like this:
> 
>  https://webdav.yandex.ru  ""
> 
> When I removed double quotes:
> 
>  https://webdav.yandex.ru  
> 
> WebDAV share mounted withoud errors.

This workaround works on my system too.

As an alternative workaround, building and installing davfs2 from its
upstream source using checkinstall resolved the problem without me
having to remove the double quotes.  I believe that the Debian packaging
tools automatically activate various stack-smashing detecting
compilation flags.  So if you want to test your new version, Werner, you
might want to look at Debian's compilation flags.

P.S. Unfortunately I never received your request for further information
and just happened to look at this bug today.  For the future, if you had
sent a reply to 812456-submit...@bugs.debian.org instead of
812...@bugs.debian.org it would have reached me as well as being
recorded in the bug report.

-- 
Sean Whitton


signature.asc
Description: PGP signature

Bug#812456: davfs2: dies with stack smashing error; can't mount

[Werner Baumann]

Thanks for the additional information. It helped me to reproduce and
locate the bug.

I will release a new upstream version soon and then notify the Debian
maintainer.

Werner

Bug#812456: davfs2: dies with stack smashing error; can't mount

[Литвинов Евгений]

I had the same error. My file /home/asd/.davfs2/secrets looked like this:

https://webdav.yandex.ru  ""

When I removed double quotes:

https://webdav.yandex.ru  

WebDAV share mounted withoud errors.

Bug#812456: davfs2: dies with stack smashing error; can't mount

[Werner Baumann]

This is a (very) late reply from upstream.
Sorry for the delay. I hoped somebody else would care because I had no
32-bit testing system.

Now I have upgraded an old Thinkpad from Jessie to Stretch installed
davfs2-1.5.2-1.2 from Sid and tested. Result:

Works as expected; no stack smashing error. I can't reproduce the
problem.

Could you please verify that the problem still exists, probably after
updating your system and checking for possible inconsistencies?

Werner

Bug#812456: davfs2: dies with stack smashing error; can't mount

[Sean Whitton]

Package: davfs2
Version: 1.5.2-1.1
Severity: grave
Justification: renders package unusable

Dear Maintainer,

After a recent upgrade to davfs2 (I am tracking Debian Testing), I can
no longer mount my WebDAV share with davfs2.  When I run

mount ~/lib/fm

the program exits with the following error:

*** stack smashing detected ***: /sbin/mount.davfs terminated

and the WebDAV share is not mounted.

Attached to this e-mail is the full output of the program.  Below I have
included the relevant configuration file snippets.

Please excuse me if a bug severity of "grave" is not appropriate.  The
package is currently unusable for me, but I don't know if it renders
it unusable for others.

Regards,
 Sean Whitton

-- System Information:
Debian Release: stretch/sid
  APT prefers testing
  APT policy: (900, 'testing')
Architecture: i386 (i686)

Kernel: Linux 4.3.0-1-686-pae (SMP w/2 CPU cores)
Locale: LANG=en_GB.utf8, LC_CTYPE=en_GB.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages davfs2 depends on:
ii  adduser3.113+nmu3
ii  debconf [debconf-2.0]  1.5.58
ii  libc6  2.21-6
ii  libneon27  0.30.1-2+b1

davfs2 recommends no packages.

davfs2 suggests no packages.

-- Configuration Files that I have modified:
/etc/fstab (snippet):

https://myfiles.messagingengine.com/ /home/swhitton/lib/fm davfs 
user,noauto,uid=swhitton,file_mode=600,dir_mode=700 0 1

/home/swhitton/.davfs2/secrets:

https://myfiles.messagingengine.com/ "" ""

-- debconf information:
  davfs2/non_root_users_confimed:
* davfs2/suid_file: true
  davfs2/group_name: davfs2
  davfs2/new_group: true
  davfs2/user_name: davfs2
  davfs2/new_user: true
artemis ~ % mount lib/fm
*** stack smashing detected ***: /sbin/mount.davfs terminated
=== Backtrace: =
/lib/i386-linux-gnu/i686/cmov/libc.so.6(+0x69439)[0xb7545439]
/lib/i386-linux-gnu/i686/cmov/libc.so.6(__fortify_fail+0x37)[0xb75d4807]
/lib/i386-linux-gnu/i686/cmov/libc.so.6(+0xf87ca)[0xb75d47ca]
/sbin/mount.davfs[0x8059dc5]
/sbin/mount.davfs[0x804bbdd]
/lib/i386-linux-gnu/i686/cmov/libc.so.6(__libc_start_main+0xde)[0xb74f470e]
/sbin/mount.davfs[0x804d8fb]
=== Memory map: 
08048000-08068000 r-xp  fb:00 17057181   /usr/sbin/mount.davfs
08068000-08069000 r--p 0001f000 fb:00 17057181   /usr/sbin/mount.davfs
08069000-0806a000 rw-p 0002 fb:00 17057181   /usr/sbin/mount.davfs
08dd-08df5000 rw-p  00:00 0  [heap]
b4e4b000-b4e57000 r-xp  fb:00 45482067   
/lib/i386-linux-gnu/i686/cmov/libnss_files-2.21.so
b4e57000-b4e58000 r--p b000 fb:00 45482067   
/lib/i386-linux-gnu/i686/cmov/libnss_files-2.21.so
b4e58000-b4e59000 rw-p c000 fb:00 45482067   
/lib/i386-linux-gnu/i686/cmov/libnss_files-2.21.so
b4e59000-b4e64000 r-xp  fb:00 45482072   
/lib/i386-linux-gnu/i686/cmov/libnss_nis-2.21.so
b4e64000-b4e65000 r--p a000 fb:00 45482072   
/lib/i386-linux-gnu/i686/cmov/libnss_nis-2.21.so
b4e65000-b4e66000 rw-p b000 fb:00 45482072   
/lib/i386-linux-gnu/i686/cmov/libnss_nis-2.21.so
b4e66000-b4e7d000 r-xp  fb:00 45482059   
/lib/i386-linux-gnu/i686/cmov/libnsl-2.21.so
b4e7d000-b4e7e000 r--p 00016000 fb:00 45482059   
/lib/i386-linux-gnu/i686/cmov/libnsl-2.21.so
b4e7e000-b4e7f000 rw-p 00017000 fb:00 45482059   
/lib/i386-linux-gnu/i686/cmov/libnsl-2.21.so
b4e7f000-b4e81000 rw-p  00:00 0 
b4e81000-b4e88000 r-xp  fb:00 45482061   
/lib/i386-linux-gnu/i686/cmov/libnss_compat-2.21.so
b4e88000-b4e89000 ---p 7000 fb:00 45482061   
/lib/i386-linux-gnu/i686/cmov/libnss_compat-2.21.so
b4e89000-b4e8a000 r--p 7000 fb:00 45482061   
/lib/i386-linux-gnu/i686/cmov/libnss_compat-2.21.so
b4e8a000-b4e8b000 rw-p 8000 fb:00 45482061   
/lib/i386-linux-gnu/i686/cmov/libnss_compat-2.21.so
b4e8b000-b5015000 r--p  fb:00 17057124   /usr/lib/locale/locale-archive
b5015000-b5019000 rw-p  00:00 0 
b5019000-b5035000 r-xp  fb:00 45351390   
/lib/i386-linux-gnu/libgcc_s.so.1
b5035000-b5036000 rw-p 0001b000 fb:00 45351390   
/lib/i386-linux-gnu/libgcc_s.so.1
b5036000-b519c000 r-xp  fb:00 17052224   
/usr/lib/i386-linux-gnu/libstdc++.so.6.0.21
b519c000-b519d000 ---p 00166000 fb:00 17052224   
/usr/lib/i386-linux-gnu/libstdc++.so.6.0.21
b519d000-b51a2000 r--p 00166000 fb:00 17052224   
/usr/lib/i386-linux-gnu/libstdc++.so.6.0.21
b51a2000-b51a3000 rw-p 0016b000 fb:00 17052224   
/usr/lib/i386-linux-gnu/libstdc++.so.6.0.21
b51a3000-b51a6000 rw-p  00:00 0 
b51a6000-b51f1000 r-xp  fb:00 45482054   
/lib/i386-linux-gnu/i686/cmov/libm-2.21.so
b51f1000-b51f2000 r--p 0004a000 fb:00 45482054   
/lib/i386-linux-gnu/i686/cmov/libm-2.21.so
b51f2000-b51f3000 rw-p 0004b000 fb:00 45482054   
/lib/i386-linux-gnu/i686/cmov/libm-2.21.so
b51f3000-b5219000 r-xp  fb:00 45350950   
/lib/i386-linux-gnu/liblzma.so.5.0.0
b5219000-b521b000 r--p 00026000 fb:00 45350950