[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#343365: libc6: strfry() SEGVs

Package: libc6
Version: 2.3.5-8
Severity: important

When I attempt to use strfry() as documented, it segfaults.

Please see the following attachments:

* my C source code
* my compiled ELF executable
* a transcript of my GDB session

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'stable')
Architecture: powerpc (ppc)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.9-powerpc-smp
Locale: LANG=C, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

-- no debconf information
/* cc -Wall -Werror -std=c99 */

#define _GNU_SOURCE /* strfry() */

#include <stdio.h> /* printf() */
#include <stdlib.h> /* malloc() */
#include <string.h> /* strfry(), strncpy() */

int main(int argc, char **argv) {
    char *string;

    string = malloc(sizeof(char) * 8);
    (void) strncpy(string, "bletch", sizeof(char) * 8);

    (void) printf("%s\n", string);
    (void) strncpy(string, "greunk", sizeof(char) * 8);
    (void) strfry(string);
    (void) printf("%s\n", string);

    return 0;

/* vim:set cindent et sts=4 sw=4 tw=80: */

Attachment: strfry
Description: application/executable

$ gdb ./strfry ./core
GNU gdb 6.3.90_20051119-debian
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "powerpc-linux-gnu"...Using host libthread_db library "/lib/tls/libthread_db.so.1".

Core was generated by `./strfry'.
Program terminated with signal 11, Segmentation fault.
Reading symbols from /usr/lib/debug/libc.so.6...done.
Loaded symbols for /usr/lib/debug/libc.so.6
Reading symbols from /lib/ld.so.1...Reading symbols from /usr/lib/debug/lib/ld-2.3.5.so...done.
Loaded symbols for /lib/ld.so.1
#0  __initstate_r (seed=1133653892, arg_state=0xffee50c "", n=32, buf=0xffee4f0) at random_r.c:252
252     random_r.c: No such file or directory.
        in random_r.c
(gdb) bt full
#0  __initstate_r (seed=1133653892, arg_state=0xffee50c "", n=32, buf=0xffee4f0) at random_r.c:252
        type = 1133648766
        degree = 33618226
        separation = 4146
        state = (int32_t *) 0xffee4f0
        old_type = 0
        old_state = (int32_t *) 0x0
#1  0x0ff3a8e8 in strfry (string=0x100008a4 "bletch") at strfry.c:35
        state = '\0' <repeats 31 times>
        init = 0
        rdata = {fptr = 0x0, rptr = 0x0, state = 0x0, rand_type = 0, rand_deg = 0, rand_sep = 0, end_ptr = 0x0}
        i = 268362992
#2  0x100004c8 in main (argc=1, argv=0x7ffff3d4) at strfry.c:14
        string = 0x100008a4 "bletch"
(gdb) quit

Reply to: