#21802 – xls2csv, stack smashing detected

Bug 21802 - xls2csv, stack smashing detected

Summary: xls2csv, stack smashing detected

Status:	CLOSED FIXED

Alias:	None

Product:	Sisyphus
Classification:	Development
Component:	catdoc (show other bugs)
Version:	unstable
Hardware:	x86 Linux

Importance:	P3 normal
Assignee:	Slava Semushin
QA Contact:	qa-sisyphus

URL:
Keywords:

Depends on:
Blocks:

Reported:	2009-10-01 16:14 MSD by Alexey Bochenin
Modified:	2009-10-13 18:01 MSD (History)
CC List:	1 user (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description

Alexey Bochenin 2009-10-01 16:14:12 MSD

bash-3.2$ rpm -qa|grep catdoc
catdoc-0.94.2-alt2  
         
bash-3.2$ xls2csv --help     
*** stack smashing detected ***: xls2csv terminated
======= Backtrace: =========                       
/lib/libc.so.6(__fortify_fail+0x40)[0xb7f865f0]    
/lib/libc.so.6(__fortify_fail+0x0)[0xb7f865b0]     
xls2csv[0x804b52d]                                 
xls2csv[0x804b6dc]                                 
xls2csv[0x804915f]                                 
/lib/libc.so.6(__libc_start_main+0xe6)[0xb7ebfb26] 
xls2csv[0x8049001]                                 
======= Memory map: ========                       
08048000-0804f000 r-xp 00000000 08:02 725244     /usr/bin/xls2csv
0804f000-08050000 r-xp 00007000 08:02 725244     /usr/bin/xls2csv
08050000-08051000 rwxp 00008000 08:02 725244     /usr/bin/xls2csv
08051000-08076000 rwxp 00000000 00:00 0          [heap]
b7e2c000-b7e49000 r-xp 00000000 08:02 324604     /lib/libgcc_s.so.1
b7e49000-b7e4a000 r-xp 0001c000 08:02 324604     /lib/libgcc_s.so.1
b7e4a000-b7e4b000 rwxp 0001d000 08:02 324604     /lib/libgcc_s.so.1
b7e69000-b7ea8000 r-xp 00000000 08:02 846203     /usr/lib/locale/ru_RU.utf8/LC_CTYPE
b7ea8000-b7ea9000 rwxp 00000000 00:00 0
b7ea9000-b7ff1000 r-xp 00000000 08:02 324557     /lib/libc-2.10.1.so
b7ff1000-b7ff2000 ---p 00148000 08:02 324557     /lib/libc-2.10.1.so
b7ff2000-b7ff4000 r-xp 00148000 08:02 324557     /lib/libc-2.10.1.so
b7ff4000-b7ff5000 rwxp 0014a000 08:02 324557     /lib/libc-2.10.1.so
b7ff5000-b7ff8000 rwxp 00000000 00:00 0
b7ff8000-b801e000 r-xp 00000000 08:02 325681     /lib/libm-2.10.1.so
b801e000-b801f000 r-xp 00026000 08:02 325681     /lib/libm-2.10.1.so
b801f000-b8020000 rwxp 00027000 08:02 325681     /lib/libm-2.10.1.so
b8020000-b8021000 rwxp 00000000 00:00 0
b8038000-b803f000 r-xs 00000000 08:02 733564     /usr/lib/gconv/gconv-modules.cache
b803f000-b8040000 r-xp 00000000 00:00 0          [vdso]
b8040000-b805a000 r-xp 00000000 08:02 324701     /lib/ld-2.10.1.so
b805a000-b805b000 r-xp 0001a000 08:02 324701     /lib/ld-2.10.1.so
b805b000-b805c000 rwxp 0001b000 08:02 324701     /lib/ld-2.10.1.so
bfed0000-bfee5000 rw-p 00000000 00:00 0          [stack]
Аварийный останов
bash-3.2$

Comment 1

Slava Semushin 2009-10-12 13:15:03 MSD

Причина в патче catdoc-0.93.4-page-option.patch -- там есть off-by-one error и использование неинициализированной памяти. Вечером запушу изменения в git, и могу сделать NMU с исправлением.

2lav@: дашь NMU или сам исправишь?

Comment 2

Vitaly Lipatov 2009-10-12 18:25:12 MSD

$ ssh git.alt acl sisyphus catdoc add php-coder
girar-acl: catdoc add: php-coder: Invalid argument(s)

$ ssh git.alt acl sisyphus catdoc add phpcoder
girar-acl: 1 command(s) queued

Comment 3

Repository Robot 2009-10-13 18:01:55 MSD

catdoc-0.94.2-alt3 -> sisyphus:

* Mon Oct 12 2009 Slava Semushin <php-coder@altlinux> 0.94.2-alt3

- NMU
- Fixed xls2csv crashing (Closes: #21802)