NetBSD Problem Report #34890
From www@NetBSD.org Mon Oct 23 20:31:17 2006
Return-Path: <www@NetBSD.org>
Received: by narn.NetBSD.org (Postfix, from userid 31301)
id 157AD63B911; Mon, 23 Oct 2006 20:31:17 +0000 (UTC)
Message-Id: <20061023203117.157AD63B911@narn.NetBSD.org>
Date: Mon, 23 Oct 2006 20:31:17 +0000 (UTC)
From: lkundrak@redhat.com
Reply-To: lkundrak@redhat.com
To: gnats-bugs@NetBSD.org
Subject: ldd(1) receives SIGSEGV when called for certain files
X-Send-Pr-Version: www-1.0
>Number: 34890
>Category: bin
>Synopsis: ldd(1) receives SIGSEGV when called for certain files
>Confidential: no
>Severity: serious
>Priority: medium
>Responsible: bin-bug-people
>State: open
>Class: sw-bug
>Submitter-Id: net
>Arrival-Date: Mon Oct 23 20:35:00 +0000 2006
>Last-Modified: Mon Oct 23 20:40:03 +0000 2006
>Originator: Lubomir Kundrak
>Release: netbsd-4
>Organization:
>Environment:
NetBSD dzizs 4.0_BETA NetBSD 4.0_BETA (GENERIC) #1: Wed Oct 4 14:35:12 CEST 2006 lkundrak@dzizs:/usr/obj/sys/arch/i386/compile/GENERIC i386
>Description:
ldd(1) receives fatal signal SIGSEGV when called for /usr/obj/x11/Xserver/hw/dmx/bin/dmxreconfig/dmxreconfig.debug
$ ldd /usr/obj/x11/Xserver/hw/dmx/bin/dmxreconfig/dmxreconfig.debug
Segmentation fault (core dumped)
$ gdb `which ldd` ldd.core
...
Program terminated with signal 11, Segmentation fault.
#0 _rtld_digest_dynamic (obj=0x804f100) at /usr/src/libexec/ld.elf_so/headers.c:141
141 obj->nbuckets = hashtab[0];
(gdb) bt
#0 _rtld_digest_dynamic (obj=0x804f100) at /usr/src/libexec/ld.elf_so/headers.c:141
#1 0x08049678 in main (argc=-1077942020, argv=0x8048e64) at /usr/src/usr.bin/ldd/ldd_elf/ldd.c:188
(gdb)
>How-To-Repeat:
$ ldd /usr/obj/x11/Xserver/hw/dmx/bin/dmxreconfig/dmxreconfig.debug
>Fix:
>Audit-Trail:
From: Lubomir Kundrak <lkundrak@redhat.com>
To: gnats-bugs@NetBSD.org
Cc:
Subject: Re: bin/34890: ldd(1) receives SIGSEGV when called for certain
files
Date: Mon, 23 Oct 2006 22:39:28 +0200
Random things I found worth noting, before I find time to decide what
info is really useful. Notice the interpreter being '^A'.
$ du -sh /usr/obj/x11/Xserver/hw/dmx/bin/dmxreconfig/dmxreconfig.debug
62K /usr/obj/x11/Xserver/hw/dmx/bin/dmxreconfig/dmxreconfig.debug
$ readelf
-a /usr/obj/x11/Xserver/hw/dmx/bin/dmxreconfig/dmxreconfig.debug
...
Program Headers:
Type Offset VirtAddr PhysAddr FileSiz MemSiz Flg
Align
PHDR 0x000034 0x08048034 0x08048034 0x000c0 0x000c0 R E 0x4
INTERP 0x0000f4 0x080480f4 0x080480f4 0x00000 0x00017 R 0x1
[Requesting program interpreter: ^A]
LOAD 0x000000 0x08048000 0x08048000 0x000f4 0x010a4 R E
0x1000
LOAD 0x0000a4 0x0804a0a4 0x0804a0a4 0x00000 0x00280 RW
0x1000
DYNAMIC 0x0000f4 0x0804a0b8 0x0804a0b8 0x00000 0x000d0 RW 0x4
NOTE 0x0000f4 0x0804810c 0x0804810c 0x00000 0x00018 R 0x4
...
$
On Po, 2006-10-23 at 20:35 +0000, gnats-admin@NetBSD.org wrote:
> Thank you very much for your problem report.
> It has the internal identification `bin/34890'.
> The individual assigned to look at your
> report is: bin-bug-people.
>
> >Category: bin
> >Responsible: bin-bug-people
> >Synopsis: ldd(1) receives SIGSEGV when called for certain files
> >Arrival-Date: Mon Oct 23 20:35:00 +0000 2006
>
--
Lubomir Kundrak (Red Hat Security Response Team)
(Contact us)
$NetBSD: query-full-pr,v 1.39 2013/11/01 18:47:49 spz Exp $
$NetBSD: gnats_config.sh,v 1.8 2006/05/07 09:23:38 tsutsui Exp $
Copyright © 1994-2007
The NetBSD Foundation, Inc. ALL RIGHTS RESERVED.