[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#315667: marked as done (stack smash gcc)



Your message dated Wed, 07 Sep 2005 23:15:04 +0200
with message-id <87zmqo60mf.fsf@debian.org>
and subject line Bug#315667: stack smash gcc
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--------------------------------------
Received: (at submit) by bugs.debian.org; 24 Jun 2005 15:02:56 +0000
>From justinpryzby@users.sourceforge.net Fri Jun 24 08:02:55 2005
Return-path: <justinpryzby@users.sourceforge.net>
Received: from ms-smtp-01.nyroc.rr.com [24.24.2.55] 
	by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
	id 1Dlphn-0006xX-00; Fri, 24 Jun 2005 08:02:55 -0700
Received: from andromeda (cpe-69-202-136-66.twcny.res.rr.com [69.202.136.66] (may be forged))
	by ms-smtp-01.nyroc.rr.com (8.12.10/8.12.10) with ESMTP id j5OF2qDX014075
	for <submit@bugs.debian.org>; Fri, 24 Jun 2005 11:02:53 -0400 (EDT)
Received: from pryzbyj by andromeda with local (Exim 3.36 #1 (Debian))
	id 1Dlpha-0000V0-00
	for <submit@bugs.debian.org>; Fri, 24 Jun 2005 11:02:42 -0400
Date: Fri, 24 Jun 2005 11:02:42 -0400
To: submit@bugs.debian.org
Subject: stack smash gcc
Message-ID: <20050624150242.GB23196@andromeda>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.5.9i
From: Justin Pryzby <justinpryzby@users.sourceforge.net>
X-Virus-Scanned: Symantec AntiVirus Scan Engine
Delivered-To: submit@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE 
	autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 

Package: gcc-3.3
Severity: normal
Tags: security

When compilation of the included C program is attempted with "gcc
-std=gnu99 usnoquery.c.FREEZE.c", the compilation stalls, apparently
indefinitely.

Tagged security because it supposedly involves a stack smash:

  #47 0xb7f15c43 in malloc () from /lib/tls/libc.so.6
  Previous frame inner to this frame (corrupt stack?)

valgrind doesn't report any invalid accesses, nor does MALLOC_CHECK_
reveal anything useful.

Justin

(Note that this code fragment is the result of deleting lots of other
code, in an attempt to discover the minimal test case.  Right now, the
code doesn't make much sense, and I know that.)

#include <string.h>
int main(int argc, char **t)
{
#define	UNEXPT_URL(s)	do {\
	foo();\
}
	UNEXPT_URL("");
	UNEXPT_URL(t);

	if (strcmp(t, "_fch.html")) UNEXPT_URL();
}

---------------------------------------
Received: (at 315667-done) by bugs.debian.org; 7 Sep 2005 21:15:36 +0000
>From falk@debian.org Wed Sep 07 14:15:36 2005
Return-path: <falk@debian.org>
Received: from smtp06.web.de [217.72.192.224] 
	by spohr.debian.org with esmtp (Exim 3.36 1 (Debian))
	id 1ED7Ga-0005Y7-00; Wed, 07 Sep 2005 14:15:36 -0700
Received: from [82.82.219.39] (helo=juist)
	by smtp06.web.de with asmtp (TLSv1:DES-CBC3-SHA:168)
	(WEB.DE 4.105 #314)
	id 1ED7G4-0005LK-00
	for 315667-done@bugs.debian.org; Wed, 07 Sep 2005 23:15:04 +0200
Received: from falk by juist with local (Exim 4.52)
	id 1ED7G4-0004ju-66
	for 315667-done@bugs.debian.org; Wed, 07 Sep 2005 23:15:04 +0200
To: 315667-done@bugs.debian.org
Subject: Bug#315667: stack smash gcc
From: Falk Hueffner <falk@debian.org>
X-Face: "iUeUu$b*W_"w?tV83Y3*r:`rh&dRv}$YnZ3,LVeCZSYVuf[Gpo*5%_=/\_!gc_,SS}[~xZ
 wY77I-M)xHIx:2f56g%/`SOw"Dx%4Xq0&f\Tj~>|QR|vGlU}TBYhiG(K:2<T^
Date: Wed, 07 Sep 2005 23:15:04 +0200
Message-ID: <87zmqo60mf.fsf@debian.org>
User-Agent: Gnus/5.1006 (Gnus v5.10.6) XEmacs/21.5 (cilantro, linux)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Sender: falk@debian.org
X-Sender: falk.hueffner@web.de
Delivered-To: 315667-done@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-11.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER,
	HAS_PACKAGE autolearn=ham version=2.60-bugs.debian.org_2005_01_02

Version: 3.4.4-8
Package: gcc-3.4

This is fixed in gcc 3.4, so let's close it like the other 3.3 only
bugs.

-- 
	Falk



Reply to: