Bug#54062: libc6: bash crashes when using NIS username completion
Package: libc6
Version: 2.1.2-11
Severity: normal
Hi,
this bug occurs when I try to use bash completion in the following
context:
$ ls ~bonn<Tab>
Here is /etc/passwd:
[...]
+bonnaud::0:0:::
+@info::0:0:::
+:*:0:0:::/etc/NoShell
If I remove the line for the "info" netgroup, then bash does not crash.
$ export LD_LIBRARY_PATH=/usr/lib/debug
$ gdb bash
GNU gdb 19990928
Copyright 1998 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "i686-pc-linux-gnu"...(no debugging symbols found)...
(gdb) run
Starting program: /bin/bash
$
$ ls ~bonn(no debugging symbols found)...
Program received signal SIGSEGV, Segmentation fault.
_nss_nis_getnetgrent_r (result=0x40155844, buffer=0x80e080c "+@info", buflen=1024, errnop=0x4012105e)
at nss_nis/nis-netgrp.c:121
121 nss_nis/nis-netgrp.c: No such file or directory.
(gdb) bt
#0 _nss_nis_getnetgrent_r (result=0x40155844, buffer=0x80e080c "+@info", buflen=1024,
errnop=0x4012105e) at nss_nis/nis-netgrp.c:121
#1 0x401210a4 in __internal_getnetgrent_r (hostp=0xbfffe99c, userp=0xbfffe9a0, domainp=0xbfffe9a4,
datap=0x40155844, buffer=0x80e080c "+@info", buflen=1024, errnop=0x40145ee0)
at getnetgrent_r.c:210
#2 0x4014eb7d in getpwent_next_nis_netgr (name=0x0, result=0x40147304, ent=0x40155800,
group=0x80e080e "info", buffer=0x80e080c "+@info", buflen=1024, errnop=0x40145ee0)
at nss_compat/compat-pwd.c:435
#3 0x4014fbab in getpwent_next_file (result=0x40147304, ent=0x40155800, buffer=0x80e080c "+@info",
buflen=1024, errnop=0x40145ee0) at nss_compat/compat-pwd.c:1024
#4 0x4014fe36 in internal_getpwent_r (pw=0x40147304, ent=0x40155800, buffer=0x80e080c "+@info",
buflen=1024, errnop=0x40145ee0) at nss_compat/compat-pwd.c:1125
#5 0x4014feff in _nss_compat_getpwent_r (pwd=0x40147304, buffer=0x80e080c "+@info", buflen=1024,
errnop=0x40145ee0) at nss_compat/compat-pwd.c:1147
#6 0x400ea089 in __getpwent_r (resbuf=0x40147304, buffer=0x80e080c "+@info", buflen=1024,
result=0xbfffef48) at ../nss/getXXent_r.c:248
#7 0x400e9a76 in getpwent () at ../nss/getXXent.c:106
#8 0x8091784 in username_completion_function ()
#9 0x8091691 in completion_matches ()
#10 0x807c26c in bash_re_edit ()
#11 0x809091d in rl_insert_completions ()
#12 0x8091479 in rl_complete_internal ()
#13 0x809030a in rl_complete ()
#14 0x808c0b7 in _rl_dispatch ()
#15 0x808beb4 in readline_internal_char ()
#16 0x808bf55 in readline_internal_char ()
#17 0x808bf70 in readline_internal_char ()
#18 0x808bc58 in readline ()
#19 0x805ac69 in input_file_descriptor ()
#20 0x805ab89 in yy_getc ()
#21 0x805b3f7 in read_secondary_line ()
#22 0x805bd7a in reset_parser ()
#23 0x805b88b in execute_prompt_command ()
#24 0x8059d45 in yyparse ()
#25 0x80599ed in parse_command ()
#26 0x8059a9e in read_command ()
#27 0x8059836 in reader_loop ()
#28 0x8058137 in main ()
#29 0x400867e2 in __libc_start_main (main=0x8057a90 <main>, argc=1, argv=0xbffffb04,
init=0x80570e8 <_init>, fini=0x809e08c <_fini>, rtld_fini=0x4000a360 <_dl_fini>,
stack_end=0xbffffafc) at ../sysdeps/generic/libc-start.c:90
-- System Information
Debian Release: potato
Architecture: i386
Kernel: Linux pc-dg-116-01 2.2.13 #1 Sat Nov 20 12:44:19 EST 1999 i686
Versions of packages libc6 depends on:
ii ldso 1.9.11-5 The Linux dynamic linker, library
# /etc/nsswitch.conf
#
# Example configuration of GNU Name Service Switch functionality.
# If you have the `glibc-doc' and `info' packages installed, try:
# `info libc "Name Service Switch"' for information about this file.
passwd: compat
group: compat
shadow: compat
hosts: files dns
networks: files
protocols: db files
services: db files
ethers: db files
rpc: db files
netgroup: nis
Reply to: