linux-kernel - Re: qconf: reproducible segfault

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Thu, 4 Jan 2007 12:42:31 +0300
From:	"Cyrill V. Gorcunov" <gorcunov@...il.com>
To:	alessandro.suardi@...il.com
Cc:	kernel list <linux-kernel@...r.kernel.org>
Subject: Re: qconf: reproducible segfault

Hi,
there is SIGSEGV happens in qconf.cc:995

	str += print_filter(sym->name);

but sym points to 0x1. To reproduce the error just do:

1) make xconfig (with Options->Show Debug Info unchecked)
2) go to Networking->Networking Options->Network packet filtering framework (Netfilter)->
   Network packet filtering framework (Netfilter) and the line "<| .." must be selected
   then just turn on Options->Show Debug info menu and you'll get:

	make[1]: *** [xconfig] Segmentation fault
	make: *** [xconfig] Error 2

gdb shows:

	Program received signal SIGSEGV, Segmentation fault.
	0x08069834 in ConfigInfoView::symbolInfo (this=0x85ae750) at qconf.cc:995
(gdb) bt
	#0  0x08069834 in ConfigInfoView::symbolInfo (this=0x85ae750) at qconf.cc:995
	#1  0x080696a9 in ConfigInfoView::setShowDebug (this=0x85ae750, b=true)
    at qconf.cc:946
	#2  0x080648bf in ConfigInfoView::qt_invoke (this=0x85ae750, _id=161, 
    _o=0xbfc56ea0) at qconf.moc:544
	#3  0xb7a5b1cc in QObject::activate_signal () from /usr/qt/3/lib/libqt-mt.so.3
	#4  0xb7a5b800 in QObject::activate_signal_bool ()
   from /usr/qt/3/lib/libqt-mt.so.3
	#5  0xb7dbd44b in QAction::toggled () from /usr/qt/3/lib/libqt-mt.so.3
	#6  0xb7ba0876 in QAction::setOn () from /usr/qt/3/lib/libqt-mt.so.3
	#7  0xb7ba0a94 in QAction::internalActivation ()
   from /usr/qt/3/lib/libqt-mt.so.3
	#8  0xb7dbd544 in QAction::qt_invoke () from /usr/qt/3/lib/libqt-mt.so.3
	#9  0xb7a5b1cc in QObject::activate_signal () from /usr/qt/3/lib/libqt-mt.so.3
	#10 0xb7d9cc7a in QSignal::signal () from /usr/qt/3/lib/libqt-mt.so.3
	#11 0xb7a753bd in QSignal::activate () from /usr/qt/3/lib/libqt-mt.so.3
	#12 0xb7b62c09 in QPopupMenu::mouseReleaseEvent ()
   from /usr/qt/3/lib/libqt-mt.so.3
	#13 0xb7a915b7 in QWidget::event () from /usr/qt/3/lib/libqt-mt.so.3
	#14 0xb79fe9df in QApplication::internalNotify ()
   from /usr/qt/3/lib/libqt-mt.so.3
	#15 0xb79fde44 in QApplication::notify () from /usr/qt/3/lib/libqt-mt.so.3
	#16 0xb79937c1 in QETWidget::translateMouseEvent ()
   from /usr/qt/3/lib/libqt-mt.so.3
	#17 0xb7991835 in QApplication::x11ProcessEvent ()
   from /usr/qt/3/lib/libqt-mt.so.3
	#18 0xb79a8bb4 in QEventLoop::processEvents ()
   from /usr/qt/3/lib/libqt-mt.so.3
	#19 0xb7a10d18 in QEventLoop::enterLoop () from /usr/qt/3/lib/libqt-mt.so.3
	#20 0xb7a10bc8 in QEventLoop::exec () from /usr/qt/3/lib/libqt-mt.so.3
	#21 0xb79fec31 in QApplication::exec () from /usr/qt/3/lib/libqt-mt.so.3
	#22 0x08074453 in main (ac=2, av=0xbfc57ac4) at qconf.cc:1736
(gdb) p sym
	$20 = (symbol *) 0x1

I'm investigating this...

-- 
	- Cyrill
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/