← Back to team overview

touch-packages team mailing list archive

[Bug 1352504] Re: Regression in 2.11.1-0ubuntu7.14; segfault in getservbyname

 

This is nscd with LDAP.


I can reproduce the problem:

root@web:~# /etc/init.d/nscd start ; apt-get update
 * Starting Name Service Cache Daemon nscd                                                                                                                                                                                                                             [ OK ] 
0% [Working]*** glibc detected *** /usr/lib/apt/methods/http: munmap_chunk(): invalid pointer: 0x00007f270db89458 ***
======= Backtrace: =========
/lib/libc.so.6(+0x78cc6)[0x7f270cd8ccc6]
/lib/libc.so.6(+0x125ec9)[0x7f270ce39ec9]
/lib/libc.so.6(+0x12628b)[0x7f270ce3a28b]
/lib/libc.so.6(getservbyname_r+0x183)[0x7f270ce1cde3]
/lib/libc.so.6(+0xb9ff2)[0x7f270cdcdff2]
/lib/libc.so.6(+0xbad50)[0x7f270cdced50]
/lib/libc.so.6(getaddrinfo+0x162)[0x7f270cdd18f2]
/usr/lib/apt/methods/http[0x40b337]
/usr/lib/apt/methods/http[0x406748]
/usr/lib/apt/methods/http[0x407d39]
/usr/lib/apt/methods/http[0x40a0cb]
/lib/libc.so.6(__libc_start_main+0xfd)[0x7f270cd32cad]
/usr/lib/apt/methods/http[0x4041c9]
======= Memory map: ========
00400000-0040e000 r-xp 00000000 08:01 2381348                            /usr/lib/apt/methods/http
0060d000-0060e000 r--p 0000d000 08:01 2381348                            /usr/lib/apt/methods/http
0060e000-0060f000 rw-p 0000e000 08:01 2381348                            /usr/lib/apt/methods/http
017c1000-017e2000 rw-p 00000000 00:00 0                                  [heap]
7f270c90d000-7f270c90f000 r-xp 00000000 08:01 1839337                    /lib/libdl-2.11.1.so
7f270c90f000-7f270cb0f000 ---p 00002000 08:01 1839337                    /lib/libdl-2.11.1.so
7f270cb0f000-7f270cb10000 r--p 00002000 08:01 1839337                    /lib/libdl-2.11.1.so
7f270cb10000-7f270cb11000 rw-p 00003000 08:01 1839337                    /lib/libdl-2.11.1.so
7f270cb11000-7f270cb13000 r-xp 00000000 08:01 1839348                    /lib/libutil-2.11.1.so
7f270cb13000-7f270cd12000 ---p 00002000 08:01 1839348                    /lib/libutil-2.11.1.so
7f270cd12000-7f270cd13000 r--p 00001000 08:01 1839348                    /lib/libutil-2.11.1.so
7f270cd13000-7f270cd14000 rw-p 00002000 08:01 1839348                    /lib/libutil-2.11.1.so
7f270cd14000-7f270ce93000 r-xp 00000000 08:01 1839349                    /lib/libc-2.11.1.so
7f270ce93000-7f270d093000 ---p 0017f000 08:01 1839349                    /lib/libc-2.11.1.so
7f270d093000-7f270d097000 r--p 0017f000 08:01 1839349                    /lib/libc-2.11.1.so
7f270d097000-7f270d098000 rw-p 00183000 08:01 1839349                    /lib/libc-2.11.1.so
7f270d098000-7f270d09d000 rw-p 00000000 00:00 0 
7f270d09d000-7f270d0b3000 r-xp 00000000 08:01 1844905                    /lib/libgcc_s.so.1
7f270d0b3000-7f270d2b2000 ---p 00016000 08:01 1844905                    /lib/libgcc_s.so.1
7f270d2b2000-7f270d2b3000 r--p 00015000 08:01 1844905                    /lib/libgcc_s.so.1
7f270d2b3000-7f270d2b4000 rw-p 00016000 08:01 1844905                    /lib/libgcc_s.so.1
7f270d2b4000-7f270d336000 r-xp 00000000 08:01 1839340                    /lib/libm-2.11.1.so
7f270d336000-7f270d535000 ---p 00082000 08:01 1839340                    /lib/libm-2.11.1.so
7f270d535000-7f270d536000 r--p 00081000 08:01 1839340                    /lib/libm-2.11.1.so
7f270d536000-7f270d537000 rw-p 00082000 08:01 1839340                    /lib/libm-2.11.1.so
7f270d537000-7f270d62d000 r-xp 00000000 08:01 2112249                    /usr/lib/libstdc++.so.6.0.13
7f270d62d000-7f270d82d000 ---p 000f6000 08:01 2112249                    /usr/lib/libstdc++.so.6.0.13
7f270d82d000-7f270d834000 r--p 000f6000 08:01 2112249                    /usr/lib/libstdc++.so.6.0.13
7f270d834000-7f270d836000 rw-p 000fd000 08:01 2112249                    /usr/lib/libstdc++.so.6.0.13
7f270d836000-7f270d84b000 rw-p 00000000 00:00 0 
7f270d84b000-7f270d910000 r-xp 00000000 08:01 2112272                    /usr/lib/libapt-pkg-libc6.10-6.so.4.8.0
7f270d910000-7f270db10000 ---p 000c5000 08:01 2112272                    /usr/lib/libapt-pkg-libc6.10-6.so.4.8.0
7f270db10000-7f270db13000 r--p 000c5000 08:01 2112272                    /usr/lib/libapt-pkg-libc6.10-6.so.4.8.0
7f270db13000-7f270db14000 rw-p 000c8000 08:01 2112272                    /usr/lib/libapt-pkg-libc6.10-6.so.4.8.0
7f270db14000-7f270db34000 r-xp 00000000 08:01 1839328                    /lib/ld-2.11.1.so
7f270db89000-7f270dbbe000 r--s 00000000 08:01 1327281                    /var/cache/nscd/services
7f270dbbe000-7f270dbfd000 r--p 00000000 08:01 2111285                    /usr/lib/locale/en_US.utf8/LC_CTYPE
7f270dbfd000-7f270dbfe000 r--p 00000000 08:01 2111283                    /usr/lib/locale/en_US.utf8/LC_NUMERIC
7f270dbfe000-7f270dbff000 r--p 00000000 08:01 2111320                    /usr/lib/locale/en_US.utf8/LC_TIME
7f270dbff000-7f270dd1d000 r--p 00000000 08:01 2111280                    /usr/lib/locale/en_US.utf8/LC_COLLATE
7f270dd1d000-7f270dd1e000 r--p 00000000 08:01 2111321                    /usr/lib/locale/en_US.utf8/LC_MONETARY
7f270dd1e000-7f270dd1f000 r--p 00000000 08:01 2111314                    /usr/lib/locale/en_US.utf8/LC_MESSAGES/SYS_LC_MESSAGES
7f270dd1f000-7f270dd26000 r--s 00000000 08:01 524845                     /usr/lib/gconv/gconv-modules.cache
7f270dd26000-7f270dd2b000 rw-p 00000000 00:00 0 
7f270dd2b000-7f270dd2c000 r--p 00000000 08:01 2111315                    /usr/lib/locale/en_US.utf8/LC_PAPER
7f270dd2c000-7f270dd2d000 r--p 00000000 08:01 2111284                    /usr/lib/locale/en_US.utf8/LC_NAME
7f270dd2d000-7f270dd2e000 r--p 00000000 08:01 2111317                    /usr/lib/locale/en_US.utf8/LC_ADDRESS
7f270dd2e000-7f270dd2f000 r--p 00000000 08:01 2111316                    /usr/lib/locale/en_US.utf8/LC_TELEPHONE
7f270dd2f000-7f270dd30000 r--p 00000000 08:01 2111319                    /usr/lib/locale/en_US.utf8/LC_MEASUREMENT
7f270dd30000-7f270dd31000 r--p 00000000 08:01 2111318                    /usr/lib/locale/en_US.utf8/LC_IDENTIFICATION
7f270dd31000-7f270dd33000 rw-p 00000000 00:00 0 
7f270dd33000-7f270dd34000 r--p 0001f000 08:01 1839328                    /lib/ld-2.11.1.so
7f270dd34000-7f270dd35000 rw-p 00020000 08:01 1839328                    /lib/ld-2.11.1.so
7f270dd35000-7f270dd36000 rw-p 00000000 00:00 0 
7fff2559b000-7fff255b0000 rw-p 00000000 00:00 0                          [stack]
7fff255cc000-7fff255cd000 r-xp 00000000 00:00 0                          [vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0                  [vsyscall]
*** glibc detected *** /usr/lib/apt/methods/http: munmap_chunk(): invalid pointer: 0x00007fa1cc9b8458 ***
======= Backtrace: =========
/lib/libc.so.6(+0x78cc6)[0x7fa1cbbbbcc6]
/lib/libc.so.6(+0x125ec9)[0x7fa1cbc68ec9]
/lib/libc.so.6(+0x12628b)[0x7fa1cbc6928b]
/lib/libc.so.6(getservbyname_r+0x183)[0x7fa1cbc4bde3]
/lib/libc.so.6(+0xb9ff2)[0x7fa1cbbfcff2]
/lib/libc.so.6(+0xbad50)[0x7fa1cbbfdd50]
E: Method http has died unexpectedly!
E: Sub-process http received signal 6.
E: Method http has died unexpectedly!
E: Sub-process http received signal 6.

root@web:~# /etc/init.d/nscd stop ; apt-get update
 * Stopping Name Service Cache Daemon nscd                                                                                                                                                                                                                             [ OK ] 
Get:1 http://nl.archive.ubuntu.com lucid Release.gpg [189B]
Ign http://nl.archive.ubuntu.com/ubuntu/ lucid/main Translation-en_US                                                                               
Ign http://nl.archive.ubuntu.com/ubuntu/ lucid/restricted Translation-en_US                                               
Ign http://nl.archive.ubuntu.com/ubuntu/ lucid/universe Translation-en_US                                                 
Ign http://nl.archive.ubuntu.com/ubuntu/ lucid/multiverse Translation-en_US                                               
Get:2 http://nl.archive.ubuntu.com lucid-updates Release.gpg [198B]                                                       
Etc...
Fetched 981B in 0s (2,107B/s)
Reading package lists... Done

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to eglibc in Ubuntu.
https://bugs.launchpad.net/bugs/1352504

Title:
  Regression in 2.11.1-0ubuntu7.14; segfault in getservbyname

Status in “eglibc” package in Ubuntu:
  Invalid
Status in “eglibc” source package in Lucid:
  Confirmed
Status in “eglibc” source package in Precise:
  Invalid
Status in “eglibc” source package in Trusty:
  Invalid
Status in “eglibc” source package in Utopic:
  Invalid

Bug description:
  After taking security updates to 2.11.1-0ubuntu7.14 on Lucid, calls to
  getservbyname() are causing segfaults; backtrace attached.  I suspect
  a failure in debian/patches/any/CVE-2013-4357.diff

  nscd is installed and in use as a caching layer for openldap, which
  use used for passwd, group, and shadow but not services.

  Needless to say, a security update that causes a regression which
  makes 'apt-get' segfault is quite unfortunate.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/eglibc/+bug/1352504/+subscriptions


References