Bug#397020: iconvconfig segfault
Julien Danjou a écrit :
> Package: libc6
> Version: 2.3.6.ds1-7
> Severity: serious
>
> Hello,
>
> Upgadring my etch system this morning, I saw that iconvconfig segfaults:
>
> zsh: segmentation fault iconvconfig
>
> Little debug info:
> # ltrace iconvconfig 2>&1 | tail -20
> mempcpy(0x9e819e6, 0x9e6a2d4, 8, 0xd9a4f8, 0xbff428d8) = 0x9e819ee
> mempcpy(0x9e819ee, 0x9e65cd9, 13, 0xb7f2fab0, 0xbff428d8) = 0x9e819fb
> mempcpy(0x9e819fb, 0x9e6d813, 15, 0xb7f2fab0, 0xbff428d8) = 0x9e81a0a
> mempcpy(0x9e81a0a, 0x9e5a077, 19, 0xbff42900, 0xbff428d8) = 0x9e81a1d
> mempcpy(0x9e81a1d, 0x9e5a601, 13, 0xb7f2fab0, 0xbff428d8) = 0x9e81a2a
> mempcpy(0x9e81a2a, 0x9e6d74e, 10, 0xb7f2fab0, 0xbff428d8) = 0x9e81a34
> mempcpy(0x9e81a34, 0x9e5a1e1, 13, 0xbff42900, 0xbff428d8) = 0x9e81a41
> mempcpy(0x9e81a41, 0x9e5a341, 13, 0xbff42900, 0xbff428d8) = 0x9e81a4e
> mempcpy(0x9e81a4e, 0x9e69e83, 15, 0xd9a4f8, 0xbff428d8) = 0x9e81a5d
> mempcpy(0x9e81a5d, 0x9e6bb9c, 16, 0xd9a4f8, 0xbff428d8) = 0x9e81a6d
> mempcpy(0x9e81a6d, 0x9e68c8f, 19, 0xb7f2fab0, 0xbff428d8) = 0x9e81a80
> mempcpy(0x9e81a80, 0x9e6cbce, 10, 0xb7f2fab0, 0xbff428d8) = 0x9e81a8a
> mempcpy(0x9e81a8a, 0x9e600a9, 13, 0xbff42900, 0xbff428d8) = 0x9e81a97
> mempcpy(0x9e81a97, 0x9e664e6, 10, 0xbff42900, 0xbff428d8) = 0x9e81aa1
> mempcpy(0x9e81aa1, 0x9e6bef5, 17, 0xbff42900, 0xbff428d8) = 0x9e81ab2
> mempcpy(0x9e81ab2, 0x9e6d8e8, 20, 0xbff42900, 0xbff428d8) = 0x9e81ac6
> calloc(1657, 4) = 0x9e81ad0
> twalk(0x9e71ce8, 0xbff429f0, 0, 1, 0x7273752f <unfinished ...>
> --- SIGSEGV (Segmentation fault) ---
> +++ killed by SIGSEGV +++
>
>
> # strace iconvconfig 2>&1 | tail -20
> read(3, "ule\tINTERNAL\t\tISO-8859-3//\t\tISO8"..., 4096) = 4096
> read(3, "lias\tISO-IR-199//\t\tISO-8859-14//"..., 4096) = 4096
> read(3, "\t\tto\t\t\tmodule\t\tcost\nalias\tCSEBCD"..., 4096) = 4096
> read(3, "ule\t\tcost\nalias\tCP284//\t\t\tIBM284"..., 4096) = 4096
> read(3, "lias\tCP864//\t\t\tIBM864//\nalias\t86"..., 4096) = 4096
> read(3, "module\tIBM937//\t\tINTERNAL\t\tIBM93"..., 4096) = 4096
> read(3, "\tEUC-JP//\nalias\tUJIS//\t\t\tEUC-JP/"..., 4096) = 4096
> read(3, "module\t\tcost\nalias\tISO-IR-143//\t"..., 4096) = 4096
> read(3, "-BOX//\nmodule\tISO_10367-BOX//\t\tI"..., 4096) = 4096
> read(3, "module\tINTERNAL\t\tEUC-JISX0213//\t"..., 4096) = 604
> brk(0x9592000) = 0x9592000
> read(3, "", 4096) = 0
> close(3) = 0
> munmap(0xb7fa1000, 4096) = 0
> gettimeofday({1162645671, 976589}, NULL) = 0
> getpid() = 4648
> open("/usr/lib/gconv/gconv-modules.cache.nHF7Mg", O_RDWR|O_CREAT|O_EXCL,
> 0600) = 3
> --- SIGSEGV (Segmentation fault) @ 0 (0) ---
> +++ killed by SIGSEGV +++
> Process 4648 detached
>
>
> (gdb) run
> Starting program: /usr/sbin/iconvconfig
> Failed to read a valid object file image from memory.
> (no debugging symbols found)
> (no debugging symbols found)
>
> Program received signal SIGSEGV, Segmentation fault.
> 0x0026a733 in tfind () from /lib/tls/libc.so.6
>
>
> FWIW, my kernel is Debian 2.6.18 recompiled with exec-shield patch, so
> it might come from that. With kernel 2.6.17-2-686 I don't have this problem.
> However, I suspect that this is a bug from iconvconfig anyway.
Could you please try the version from:
http://people.debian.org/~aurel32/glibc-execshield/
--
.''`. Aurelien Jarno | GPG: 1024D/F1BCDB73
: :' : Debian developer | Electrical Engineer
`. `' aurel32@debian.org | aurelien@aurel32.net
`- people.debian.org/~aurel32 | www.aurel32.net
Reply to: