Re: ibus/CVE-2019-14822/glibc
Brian May <bam@debian.org> writes:
> commit 7cba800a84730c9c5843acdd775e42b8c1438edf (HEAD)
> Author: Alexander Larsson <alexl@redhat.com>
> Date: Mon Jun 1 10:02:47 2015 +0200
This patch decreases the number of errors from 1 to 52.
(jessie-amd64-default)brian@silverfish:~/debian/lts/packages/glib2.0/glib$ gio/tests/network-monitor
/network-monitor/default:
(/home/brian/debian/lts/packages/glib2.0/glib/gio/tests/.libs/lt-network-monitor:20114): GLib-GObject-CRITICAL **: g_object_ref: assertion 'G_IS_OBJECT (object)' failed
Trace/breakpoint trap
gdb shows:
(jessie-amd64-default)brian@silverfish:~/debian/lts/packages/glib2.0/glib$ LD_LIBRARY_PATH=$PWD/gio/.libs gdb gio/tests/.libs/network-monitor core
GNU gdb (Debian 7.7.1+dfsg-5) 7.7.1
Copyright (C) 2014 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>.
Find the GDB manual and other documentation resources online at:
<http://www.gnu.org/software/gdb/documentation/>.
For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from gio/tests/.libs/network-monitor...done.
[New LWP 22889]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
Core was generated by `gio/tests/.libs/network-monitor'.
Program terminated with signal SIGTRAP, Trace/breakpoint trap.
#0 0x00007f035382adc0 in g_logv () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
(gdb) bt
#0 0x00007f035382adc0 in g_logv () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#1 0x00007f035382afff in g_log () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#2 0x00007f0353d01eba in g_object_ref () from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0
#3 0x00007f0353fb8e17 in cache_recv_address (native_len=<optimized out>, native=<optimized out>, socket=0x13f2130) at gsocket.c:4038
#4 g_socket_receive_message (socket=0x13f2130, address=address@entry=0x7fff92d8c288, vectors=<optimized out>, vectors@entry=0x7fff92d8c2a0, num_vectors=<optimized out>, num_vectors@entry=1,
messages=messages@entry=0x0, num_messages=num_messages@entry=0x0, flags=0x0, cancellable=0x0, error=0x7fff92d8c280) at gsocket.c:4269
#5 0x00007f0353fe58df in read_netlink_messages (socket=socket@entry=0x0, condition=condition@entry=G_IO_IN, user_data=user_data@entry=0x13e79e0) at gnetworkmonitornetlink.c:324
#6 0x00007f0353fe6287 in g_network_monitor_netlink_initable_init (initable=<optimized out>, cancellable=<optimized out>, error=0x0) at gnetworkmonitornetlink.c:141
#7 0x00007f0353f9dd3e in g_initable_new_valist (object_type=<optimized out>, first_property_name=0x0, var_args=0x7fff92d8c378, cancellable=0x0, error=0x0) at ginitable.c:228
#8 0x00007f0353f9de2c in g_initable_new (object_type=<optimized out>, cancellable=cancellable@entry=0x0, error=error@entry=0x0, first_property_name=first_property_name@entry=0x0) at ginitable.c:146
#9 0x00007f0353fa1456 in try_implementation (extension=<optimized out>, verify_func=verify_func@entry=0x0) at giomodule.c:755
#10 0x00007f0353fa15a0 in _g_io_module_get_default (extension_point=0x7f035404bc9f "gio-network-monitor", envvar=0x7f035404d565 "GIO_USE_NETWORK_MONITOR", verify_func=0x0) at giomodule.c:857
#11 0x0000000000402433 in test_default () at network-monitor.c:241
#12 0x00007f03538493d3 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#13 0x00007f03538495a2 in ?? () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#14 0x00007f035384990b in g_test_run_suite () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#15 0x00007f0353849941 in g_test_run () from /lib/x86_64-linux-gnu/libglib-2.0.so.0
#16 0x0000000000401361 in main (argc=1, argv=0x7fff92d8c818) at network-monitor.c:536
I am guessing maybe this patch has other requirements :-(
--
Brian May <bam@debian.org>
Reply to: