NetBSD Problem Report #34890

From www@NetBSD.org  Mon Oct 23 20:31:17 2006
Return-Path: <www@NetBSD.org>
Received: by narn.NetBSD.org (Postfix, from userid 31301)
	id 157AD63B911; Mon, 23 Oct 2006 20:31:17 +0000 (UTC)
Message-Id: <20061023203117.157AD63B911@narn.NetBSD.org>
Date: Mon, 23 Oct 2006 20:31:17 +0000 (UTC)
From: lkundrak@redhat.com
Reply-To: lkundrak@redhat.com
To: gnats-bugs@NetBSD.org
Subject: ldd(1) receives SIGSEGV when called for certain files
X-Send-Pr-Version: www-1.0

>Number:         34890
>Category:       bin
>Synopsis:       ldd(1) receives SIGSEGV when called for certain files
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    bin-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Mon Oct 23 20:35:00 +0000 2006
>Last-Modified:  Mon Oct 23 20:40:03 +0000 2006
>Originator:     Lubomir Kundrak
>Release:        netbsd-4
>Organization:
>Environment:
NetBSD dzizs 4.0_BETA NetBSD 4.0_BETA (GENERIC) #1: Wed Oct  4 14:35:12 CEST 2006  lkundrak@dzizs:/usr/obj/sys/arch/i386/compile/GENERIC i386

>Description:
ldd(1) receives fatal signal SIGSEGV when called for /usr/obj/x11/Xserver/hw/dmx/bin/dmxreconfig/dmxreconfig.debug

$ ldd /usr/obj/x11/Xserver/hw/dmx/bin/dmxreconfig/dmxreconfig.debug
Segmentation fault (core dumped)
$ gdb `which ldd` ldd.core
...
Program terminated with signal 11, Segmentation fault.
#0  _rtld_digest_dynamic (obj=0x804f100) at /usr/src/libexec/ld.elf_so/headers.c:141
141                                     obj->nbuckets = hashtab[0];
(gdb) bt
#0  _rtld_digest_dynamic (obj=0x804f100) at /usr/src/libexec/ld.elf_so/headers.c:141
#1  0x08049678 in main (argc=-1077942020, argv=0x8048e64) at /usr/src/usr.bin/ldd/ldd_elf/ldd.c:188
(gdb)               
>How-To-Repeat:
$ ldd /usr/obj/x11/Xserver/hw/dmx/bin/dmxreconfig/dmxreconfig.debug

>Fix:

>Audit-Trail:
From: Lubomir Kundrak <lkundrak@redhat.com>
To: gnats-bugs@NetBSD.org
Cc: 
Subject: Re: bin/34890: ldd(1) receives SIGSEGV when called for certain
	files
Date: Mon, 23 Oct 2006 22:39:28 +0200

 Random things I found worth noting, before I find time to decide what
 info is really useful. Notice the interpreter being '^A'.

 $ du -sh /usr/obj/x11/Xserver/hw/dmx/bin/dmxreconfig/dmxreconfig.debug
 62K     /usr/obj/x11/Xserver/hw/dmx/bin/dmxreconfig/dmxreconfig.debug
 $ readelf
 -a /usr/obj/x11/Xserver/hw/dmx/bin/dmxreconfig/dmxreconfig.debug
 ...
 Program Headers:
   Type           Offset   VirtAddr   PhysAddr   FileSiz MemSiz  Flg
 Align
   PHDR           0x000034 0x08048034 0x08048034 0x000c0 0x000c0 R E 0x4
   INTERP         0x0000f4 0x080480f4 0x080480f4 0x00000 0x00017 R   0x1
       [Requesting program interpreter: ^A]
   LOAD           0x000000 0x08048000 0x08048000 0x000f4 0x010a4 R E
 0x1000
   LOAD           0x0000a4 0x0804a0a4 0x0804a0a4 0x00000 0x00280 RW
 0x1000
   DYNAMIC        0x0000f4 0x0804a0b8 0x0804a0b8 0x00000 0x000d0 RW  0x4
   NOTE           0x0000f4 0x0804810c 0x0804810c 0x00000 0x00018 R   0x4
 ...
 $

 On Po, 2006-10-23 at 20:35 +0000, gnats-admin@NetBSD.org wrote:
 > Thank you very much for your problem report.
 > It has the internal identification `bin/34890'.
 > The individual assigned to look at your
 > report is: bin-bug-people. 
 > 
 > >Category:       bin
 > >Responsible:    bin-bug-people
 > >Synopsis:       ldd(1) receives SIGSEGV when called for certain files
 > >Arrival-Date:   Mon Oct 23 20:35:00 +0000 2006
 > 
 -- 
 Lubomir Kundrak (Red Hat Security Response Team)

Home	PR Database Search