← Back to team overview

kernel-packages team mailing list archive

[Bug 1475428] Re: linux-lts-trusty: 3.13.0-57 introduced bad ELF layout for PIE

 

/proc/$pid/maps info:

7fa8a979c000-7fa8a9ac0000 r-xp 00000000 08:13 1178291                    /usr/games/warzone2100
7fa8a9ac9000-7fa8a9ad1000 rw-s 00000000 00:04 74219                      /drm mm object (deleted)
7fa8a9ad1000-7fa8a9ad6000 rw-s 00000000 00:04 72406                      /drm mm object (deleted)
7fa8a9ad6000-7fa8a9ae6000 rw-s 1043eb000 00:05 10404                     /dev/dri/card0
7fa8a9ae8000-7fa8a9ae9000 rwxp 00000000 00:00 0 
7fa8a9ae9000-7fa8a9af1000 rw-s 00000000 00:04 74207                      /drm mm object (deleted)
7fa8a9af1000-7fa8a9af9000 rw-s 00000000 00:04 74206                      /drm mm object (deleted)
7fa8a9af9000-7fa8a9afa000 rw-s 00000000 00:04 74203                      /drm mm object (deleted)
7fa8a9afb000-7fa8a9b03000 rw-s 00000000 00:04 74202                      /drm mm object (deleted)
7fa8a9b03000-7fa8a9b29000 rw-p 00000000 00:00 0 
7fa8a9b2b000-7fa8a9b3d000 rw-p 00000000 00:00 0 
7fa8a9b3d000-7fa8a9b5d000 rw-s 104ccf000 00:05 10404                     /dev/dri/card0
7fa8a9b5d000-7fa8a9b64000 r--s 00000000 08:13 1474382                    /usr/lib/x86_64-linux-gnu/gconv/gconv-modules.cache
7fa8a9b64000-7fa8a9b72000 r--s 00000000 08:13 3057361                    /var/cache/fontconfig/6aa41aa22e18b8fa06a12da28ea9c28b-le64.cache-4
7fa8a9b72000-7fa8a9b73000 r--s 00000000 08:13 3022319                    /var/cache/fontconfig/c05880de57d1f5e948fdfacc138775d9-le64.cache-4
7fa8a9b73000-7fa8a9b7e000 r--s 00000000 08:13 3010375                    /var/cache/fontconfig/945677eb7aeaf62f1d50efc3fb3ec7d8-le64.cache-4
7fa8a9b7e000-7fa8a9b80000 r--s 00000000 08:13 3058519                    /var/cache/fontconfig/99e8ed0e538f840c565b6ed5dad60d56-le64.cache-4
7fa8a9b80000-7fa8a9b88000 r--s 00000000 08:13 3022314                    /var/cache/fontconfig/e25ca923d7a08ab6b0777bd7eb77ea77-le64.cache-4
7fa8a9b88000-7fa8a9b91000 r--s 00000000 08:13 3058514                    /var/cache/fontconfig/a6d8cf8e4ec09cdbc8633c31745a07dd-le64.cache-4
7fa8a9b91000-7fa8a9b97000 r--s 00000000 08:13 3022312                    /var/cache/fontconfig/2cd17615ca594fa2959ae173292e504c-le64.cache-4
7fa8a9b97000-7fa8a9b98000 r--s 00000000 08:13 3022311                    /var/cache/fontconfig/e7071f4a29fa870f4323321c154eba04-le64.cache-4
7fa8a9b98000-7fa8a9b99000 r--s 00000000 08:13 3022310                    /var/cache/fontconfig/0d8c3b2ac0904cb8a57a757ad11a4a08-le64.cache-4
7fa8a9b99000-7fa8a9ba0000 r--s 00000000 08:13 3022303                    /var/cache/fontconfig/a755afe4a08bf5b97852ceb7400b47bc-le64.cache-4
7fa8a9ba0000-7fa8a9ba4000 r--s 00000000 08:13 3022301                    /var/cache/fontconfig/6d41288fd70b0be22e8c3a91e032eec0-le64.cache-4
7fa8a9ba4000-7fa8a9bb8000 r--s 00000000 08:13 3022294                    /var/cache/fontconfig/04aabc0a78ac019cf9454389977116d2-le64.cache-4
7fa8a9bb8000-7fa8a9bb9000 r--s 00000000 08:13 3022292                    /var/cache/fontconfig/1ac9eb803944fde146138c791f5cc56a-le64.cache-4
7fa8a9bb9000-7fa8a9bbd000 r--s 00000000 08:13 3022285                    /var/cache/fontconfig/385c0604a188198f04d133e54aba7fe7-le64.cache-4
7fa8a9bbd000-7fa8a9bbe000 r--s 00000000 08:13 3022283                    /var/cache/fontconfig/9451a55048e8dbe8633e64d34165fdf2-le64.cache-4
7fa8a9bbe000-7fa8a9bbf000 r--s 00000000 08:13 3022276                    /var/cache/fontconfig/dc05db6664285cc2f12bf69c139ae4c3-le64.cache-4
7fa8a9bbf000-7fa8a9bc1000 r--s 00000000 08:13 3022252                    /var/cache/fontconfig/767a8244fc0220cfb567a839d0392e0b-le64.cache-4
7fa8a9bc1000-7fa8a9bc3000 r--s 00000000 08:13 3022250                    /var/cache/fontconfig/2fe16cf53f8bd2da9ea33d9eb6e69eee-le64.cache-4
7fa8a9bc3000-7fa8a9bc4000 r--s 00000000 08:13 3015520                    /var/cache/fontconfig/4794a0821666d79190d59a36cb4f44b5-le64.cache-4
7fa8a9bc4000-7fa8a9bcd000 r--s 00000000 08:13 3022243                    /var/cache/fontconfig/8801497958630a81b71ace7c5f9b32a8-le64.cache-4
7fa8a9bcd000-7fa8a9c08000 r--s 00000000 08:13 3056274                    /var/cache/fontconfig/365b55f210c0a22e9a19e35191240f32-le64.cache-4
7fa8a9c08000-7fa8a9c0c000 r--s 00000000 08:13 3022238                    /var/cache/fontconfig/c57959a16110560c8d0fcea73374aeeb-le64.cache-4
7fa8a9c0c000-7fa8a9c13000 r--s 00000000 08:13 3022236                    /var/cache/fontconfig/3047814df9a2f067bd2d96a2b9c36e5a-le64.cache-4
7fa8a9c13000-7fa8a9c14000 r--s 00000000 08:13 3022228                    /var/cache/fontconfig/56cf4f4769d0f4abc89a4895d7bd3ae1-le64.cache-4
7fa8a9c14000-7fa8a9c15000 r--s 00000000 08:13 3022225                    /var/cache/fontconfig/b9d506c9ac06c20b433354fa67a72993-le64.cache-4
7fa8a9c15000-7fa8a9c1b000 r--s 00000000 08:13 3022209                    /var/cache/fontconfig/b47c4e1ecd0709278f4910c18777a504-le64.cache-4
7fa8a9c1b000-7fa8a9c24000 r--s 00000000 08:13 3058511                    /var/cache/fontconfig/52f7bdb7ce746bfd7eaa1985bd9cfa93-le64.cache-4
7fa8a9c24000-7fa8a9c37000 r--s 00000000 08:13 3022201                    /var/cache/fontconfig/d52a8644073d54c13679302ca1180695-le64.cache-4
7fa8a9c37000-7fa8a9c3f000 r--s 00000000 08:13 3022182                    /var/cache/fontconfig/105b9c7e6f0a4f82d8c9b6e39c52c6f9-le64.cache-4
7fa8a9c3f000-7fa8a9c48000 r--s 00000000 08:13 3016388                    /var/cache/fontconfig/3f7329c5293ffd510edef78f73874cfd-le64.cache-4
7fa8a9c48000-7fa8a9c53000 r--s 00000000 08:13 3022137                    /var/cache/fontconfig/d589a48862398ed80a3d6066f4f56f4c-le64.cache-4
7fa8a9c53000-7fa8a9c54000 r--s 00000000 08:13 3022134                    /var/cache/fontconfig/0c9eb80ebd1c36541ebe2852d3bb0c49-le64.cache-4
7fa8a9c54000-7fa8a9c6b000 r--s 00000000 08:13 3057355                    /var/cache/fontconfig/e13b20fdb08344e0e664864cc2ede53d-le64.cache-4
7fa8a9c6b000-7fa8a9c8a000 rw-p 00000000 00:00 0 
7fa8a9c8a000-7fa8a9c8e000 r--s 00000000 08:13 3058493                    /var/cache/fontconfig/7ef2298fde41cc6eeb7af42e48b7d293-le64.cache-4
7fa8a9c8e000-7fa8a9c90000 r--s 00000000 08:13 3010315                    /var/cache/fontconfig/452f1fac34b224105d7acfae3034bcd5-le64.cache-4
7fa8a9c90000-7fa8a9c92000 r--s 00000000 08:13 3016603                    /var/cache/fontconfig/16326683038b281783a0ef8c680e3a10-le64.cache-4
7fa8a9c92000-7fa8a9c9f000 r--s 00000000 08:13 3016601                    /var/cache/fontconfig/8f02d4cb045bd6ce15663e43f347c9f8-le64.cache-4
7fa8a9c9f000-7fa8a9ca0000 r--s 00000000 08:13 3016567                    /var/cache/fontconfig/e0aa53bcfa504e64f87823c16bc01eb6-le64.cache-4
7fa8a9ca0000-7fa8a9cbe000 r--s 00000000 08:13 3015523                    /var/cache/fontconfig/467c019e582ee353435ea5c21d137ef6-le64.cache-4
7fa8a9cbe000-7fa8a9cc0000 rw-p 00000000 00:00 0 
7fa8a9cc0000-7fa8a9cc6000 r--p 00324000 08:13 1178291                    /usr/games/warzone2100
7fa8a9cc6000-7fa8a9cdf000 rw-p 0032a000 08:13 1178291                    /usr/games/warzone2100
7fa8a9cdf000-7fa8aa7ff000 rw-p 00000000 00:00 0 

There is unrelated stuff loaded between .text and .rodata which is
really ugly. No need to use apport for this.

Upstream mailing thread:
http://marc.info/?l=linux-fsdevel&m=143707886207932&w=2

** Changed in: linux (Ubuntu)
       Status: Incomplete => Confirmed

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1475428

Title:
  linux-lts-trusty: 3.13.0-57 introduced bad ELF layout for PIE

Status in linux package in Ubuntu:
  Confirmed

Bug description:
  Since 3.13.0-57 there is the following patch applied:
  "fs/binfmt_elf.c: fix bug in loading of PIE binaries" (https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a87938b2e246b81b4fb713edb371a9fa3c5c3c86)

  But it is incomplete as its fix is missing:
  https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2b1d3ae940acd11be44c6eced5873d47c2e00ffa

  And it completely messes up the PIE regions as it loads unrelated
  stuff between .text and .rodata of the PIE binary.

  See:
  https://github.com/scanmem/scanmem/issues/122

  Upstream fixed that by the following commit:
  https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d1fd836dcf00d2028c700c7e44d2c23404062c90

  So there are two options here:
  1. remove that patch
  2. apply the other fixes as well

  Also 3.16.0-41 is affected.

  Thanks!

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1475428/+subscriptions


References