Bug 16625

Summary:

Падение rpm --eval "$(cat <файл>)" на некоторых файлах

Product:

Sisyphus

Reporter:

solo <solo>

Component:

rpm

Assignee:

placeholder <placeholder>

Status:

CLOSED FIXED

QA Contact:

qa-sisyphus

Severity:

normal

Priority:

CC:

at, evg, glebfm, imz, ldv, n3npq, placeholder, vt

Version:

unstable

Hardware:

x86_64

OS:

Linux

URL:

https://bugzilla.altlinux.org/show_bug.cgi?id=16623

Attachments:

Description	Flags
magic	none
mime.types	none

Description solo 2008-08-08 12:33:57 MSD

Created attachment 2771 [details]
magic

Наблюдается падение rpm --eval "$(cat <файл>) на файлах {mime.types,magic} из исходников apache (см. https://bugzilla.altlinux.org/show_bug.cgi?id=16623), со следующей диагностикой (rpm-4.0.4-alt96 в haser):

$ rpm --eval "$(cat magic)"
*** buffer overflow detected ***: rpm terminated
======= Backtrace: =========
/lib64/libc.so.6(__chk_fail+0x2f)[0x2b9185dedd1f]
/usr/lib64/librpmio-4.0.4.so(rpmExpand+0x66)[0x2b9186287a16]
rpm(parseSpec+0x5c9)[0x4026f1]
/lib64/libc.so.6(__libc_start_main+0xf4)[0x2b9185d3dcf4]
rpm(parseSpec+0xb1)[0x4021d9]
======= Memory map: ========
Aborted

  Диагностика rpm-4.0.4-alt95.M41.1 отличается:

$ rpm --eval $(cat magic)
#
rpm: за один раз может быть исполнен только один тип проверки или запроса
[solo@notesol conf]$ rpm --eval "$(cat magic)"
*** buffer overflow detected ***: rpm terminated
======= Backtrace: =========
/lib64/libc.so.6(__chk_fail+0x2f)[0x7f05a27f0d1f]
/usr/lib64/librpmio-4.0.4.so(rpmExpand+0x66)[0x7f05a22c9a16]
rpm(parseSpec+0x5c9)[0x4026f1]
/lib64/libc.so.6(__libc_start_main+0xf4)[0x7f05a2740cf4]
rpm(parseSpec+0xb1)[0x4021d9]
======= Memory map: ========
00400000-00405000 r-xp 00000000 fd:08 10363                              /usr/bin/rpm
00605000-00606000 rw-p 00005000 fd:08 10363                              /usr/bin/rpm
00606000-00647000 rw-p 00606000 00:00 0                                  [heap]
7f05a0f45000-7f05a0f52000 r-xp 00000000 03:05 259                        /lib64/libgcc_s.so.1
7f05a0f52000-7f05a1152000 ---p 0000d000 03:05 259                        /lib64/libgcc_s.so.1
7f05a1152000-7f05a1153000 rw-p 0000d000 03:05 259                        /lib64/libgcc_s.so.1
7f05a1153000-7f05a115a000 r-xp 00000000 03:05 234                        /lib64/librt-2.5.1.so
7f05a115a000-7f05a1359000 ---p 00007000 03:05 234                        /lib64/librt-2.5.1.so
7f05a1359000-7f05a135b000 rw-p 00006000 03:05 234                        /lib64/librt-2.5.1.so
7f05a135b000-7f05a1370000 r-xp 00000000 03:05 230                        /lib64/libpthread-2.5.1.so
7f05a1370000-7f05a156f000 ---p 00015000 03:05 230                        /lib64/libpthread-2.5.1.so
7f05a156f000-7f05a1570000 r--p 00014000 03:05 230                        /lib64/libpthread-2.5.1.so
7f05a1570000-7f05a1571000 rw-p 00015000 03:05 230                        /lib64/libpthread-2.5.1.so
7f05a1571000-7f05a1575000 rw-p 7f05a1571000 00:00 0 
7f05a1575000-7f05a158a000 r-xp 00000000 03:05 248                        /lib64/libz.so.1.2.3
7f05a158a000-7f05a178a000 ---p 00015000 03:05 248                        /lib64/libz.so.1.2.3
7f05a178a000-7f05a178b000 rw-p 00015000 03:05 248                        /lib64/libz.so.1.2.3
7f05a178b000-7f05a179a000 r-xp 00000000 03:05 573                        /lib64/libbz2.so.1.0.3
7f05a179a000-7f05a199a000 ---p 0000f000 03:05 573                        /lib64/libbz2.so.1.0.3
7f05a199a000-7f05a199b000 rw-p 0000f000 03:05 573                        /lib64/libbz2.so.1.0.3
7f05a199b000-7f05a19b4000 r-xp 00000000 fd:08 1158                       /usr/lib64/libbeecrypt.so.2.2.0
7f05a19b4000-7f05a1bb3000 ---p 00019000 fd:08 1158                       /usr/lib64/libbeecrypt.so.2.2.0
7f05a1bb3000-7f05a1bb8000 rw-p 00018000 fd:08 1158                       /usr/lib64/libbeecrypt.so.2.2.0
7f05a1bb8000-7f05a1bca000 r-xp 00000000 fd:08 27069                      /usr/lib64/libelf-0.131.so
7f05a1bca000-7f05a1dc9000 ---p 00012000 fd:08 27069                      /usr/lib64/libelf-0.131.so
7f05a1dc9000-7f05a1dcb000 rw-p 00011000 fd:08 27069                      /usr/lib64/libelf-0.131.so
7f05a1dcb000-7f05a1eb3000 r-xp 00000000 03:05 485                        /lib64/libdb-4.4.so
7f05a1eb3000-7f05a20b3000 ---p 000e8000 03:05 485                        /lib64/libdb-4.4.so
7f05a20b3000-7f05a20b6000 rw-p 000e8000 03:05 485                        /lib64/libdb-4.4.so
7f05a20b6000-7f05a20bf000 r-xp 00000000 03:05 470                        /lib64/libpopt.so.0.0.0
7f05a20bf000-7f05a22be000 ---p 00009000 03:05 470                        /lib64/libpopt.so.0.0.0
7f05a22be000-7f05a22bf000 rw-p 00008000 03:05 470                        /lib64/libpopt.so.0.0.0
7f05a22bf000-7f05a22fb000 r-xp 00000000 fd:08 31674                      /usr/lib64/librpmio-4.0.4.so
7f05a22fb000-7f05a24fa000 ---p 0003c000 fd:08 31674                      /usr/lib64/librpmio-4.0.4.so
7f05a24fa000-7f05a24fc000 rw-p 0003b000 fd:08 31674                      /usr/lib64/librpmio-4.0.4.so
7f05a24fc000-7f05a2502000 rw-p 7f05a24fc000 00:00 0 
7f05a2502000-7f05a2520000 r-xp 00000000 fd:08 31673                      /usr/lib64/librpmdb-4.0.4.so
7f05a2520000-7f05a2720000 ---p 0001e000 fd:08 31673                      /usr/lib64/librpmdb-4.0.4.so
7f05a2720000-7f05a2723000 rw-p 0001e000 fd:08 31673                      /usr/lib64/librpmdb-4.0.4.so
7f05a2723000-7f05a2854000 r-xp 00000000 03:05 216                        /lib64/libc-2.5.1.so
7f05a2854000-7f05a2a54000 ---p 00131000 03:05 216                        /lib64/libc-2.5.1.so
7f05a2a54000-7f05a2a57000 r--p 00131000 03:05 216                        /lib64/libc-2.5.1.so
7f05a2a57000-7f05a2a59000 rw-p 00134000 03:05 216                        /lib64/libc-2.5.1.so
7f05a2a59000-7f05a2a5e000 rw-p 7f05a2a59000 00:00 0 
7f05a2a5e000-7f05a2a7f000 r-xp 00000000 fd:08 31685                      /usr/lib64/librpmbuild-4.0.4.so
7f05a2a7f000-7f05a2c7f000 ---p 00021000 fd:08 31685                      /usr/lib64/librpmbuild-4.0.4.so
7f05a2c7f000-7f05a2c82000 rw-p 00021000 fd:08 31685                      /usr/lib64/librpmbuild-4.0.4.so
7f05a2c82000-7f05a2c90000 rw-p 7f05a2c82000 00:00 0 
7f05a2c90000-7f05a2ccc000 r-xp 00000000 fd:08 10348                      /usr/lib64/librpm-4.0.4.so
7f05a2ccc000-7f05a2ecb000 ---p 0003c000 fd:08 10348                      /usr/lib64/librpm-4.0.4.so
7f05a2ecb000-7f05a2ecf000 rw-p 0003b000 fd:08 10348                      /usr/lib64/librpm-4.0.4.so
7f05a2ecf000-7f05a2ee8000 r-xp 00000000 03:05 210                        /lib64/ld-2.5.1.so
7f05a2fbb000-7f05a2ff6000 r--p 00000000 fd:08 22072                      /usr/lib64/locale/ru_RU.utf8/LC_CTYPE
7f05a2ff6000-7f05a30ce000 r--p 00000000 fd:08 10985                      /usr/lib64/lАварийный останов

Comment 1 solo 2008-08-08 12:34:56 MSD

Created attachment 2772 [details]
mime.types

Comment 2 Dmitry V. Levin 2008-08-29 16:46:11 MSD

(In reply to comment #0)
> Created an attachment (id=2771) [details]
> magic
> 
> Наблюдается падение rpm --eval "$(cat <файл>) на файлах {mime.types,magic} из исходников apache
> (см. https://bugzilla.altlinux.org/show_bug.cgi?id=16623), со следующей диагностикой (rpm-4.0.4-alt96 в haser):
> 
> $ rpm --eval "$(cat magic)"
> *** buffer overflow detected ***: rpm terminated

Файл слишком большой, наверное.

Comment 3 Jeff Johnson 2012-01-02 19:41:45 MSK

tracked at https://bugs.launchpad.net/rpm/+bug/910883

Comment 4 Gleb F-Malinovskiy 2016-12-16 20:56:51 MSK

rpm-4.13.0 c этим справляется.