aMule Bug Tracker - aMule | ||||||||||
View Issue Details | ||||||||||
ID | Project | Category | View Status | Date Submitted | Last Update | |||||
0001745 | aMule | External Conn | public | 2015-01-31 10:14 | 2016-10-18 02:32 | |||||
Reporter | deadhead | |||||||||
Assigned To | ||||||||||
Priority | urgent | Severity | crash | Reproducibility | always | |||||
Status | new | Resolution | open | |||||||
Platform | x86_64 | OS | Fedora | OS Version | 21 | |||||
Product Version | 2.3.1 | |||||||||
Target Version | Fixed in Version | |||||||||
Fixed in Revision | ||||||||||
Operating System | Linux Fedora 21 | |||||||||
Summary | 0001745: aMuleD 2.3.1 compiled with wxGTK2 v2.8.12 (from RPMFusion) abort on startup due to buffer overflow | |||||||||
Description | amuled installed from RPMForge repo, has begun to crash on startup 1 week ago on my Fedora 21 x86_64 server, after months of flawless work, due to a buffer overflow. Here is the debug session with all debuginfo rpm of amuled and its dependencies installed: $ gdb -f amuled GNU gdb (GDB) Fedora 7.8.2-38.fc21 Copyright (C) 2014 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> [^] This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-redhat-linux-gnu". Type "show configuration" for configuration details. For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>. [^] Find the GDB manual and other documentation resources online at: <http://www.gnu.org/software/gdb/documentation/>. [^] For help, type "help". Type "apropos word" to search for commands related to "word"... Reading symbols from amuled...Reading symbols from /usr/lib/debug/usr/bin/amuled.debug...done. done. (gdb) run Starting program: /usr/bin/amuled [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib64/libthread_db.so.1". Detaching after fork from child process 23848. 2015-01-31 09:27:33: Initialising aMuleD 2.3.1 compiled with wxGTK2 v2.8.12 2015-01-31 09:27:33: Checking if there is an instance already running... 2015-01-31 09:27:33: No other instances are running. Detaching after fork from child process 23849. Detaching after fork from child process 23850. Detaching after fork from child process 23851. 2015-01-31 09:27:33: ListenSocket: Ok. [New Thread 0x7fffeefcd700 (LWP 23852)] [New Thread 0x7fffee7cc700 (LWP 23853)] [New Thread 0x7fffedfcb700 (LWP 23854)] 2015-01-31 09:27:33: Loading temp files from /home/amule2/.aMule/Temp. 2015-01-31 09:27:33: All PartFiles Loaded. [Thread 0x7fffedfcb700 (LWP 23854) exited] [New Thread 0x7fffedfcb700 (LWP 23855)] 2015-01-31 09:27:33: amuled: OnInit - starting timer [Thread 0x7fffedfcb700 (LWP 23855) exited] [New Thread 0x7fffed3aa700 (LWP 23856)] *** buffer overflow detected ***: /usr/bin/amuled terminated ======= Backtrace: ========= /lib64/libc.so.6(+0x7850e)[0x7ffff5bcd50e] /lib64/libc.so.6(__fortify_fail+0x37)[0x7ffff5c67327] /lib64/libc.so.6(+0x1104a0)[0x7ffff5c654a0] /lib64/libc.so.6(+0x112297)[0x7ffff5c67297] /lib64/libwx_baseu_net-2.8.so.0(_ZN7GSocket13Input_TimeoutEv+0x77)[0x7ffff6ad1a57] /lib64/libwx_baseu_net-2.8.so.0(_ZN7GSocket4ReadEPci+0x39)[0x7ffff6ad2839] /lib64/libwx_baseu_net-2.8.so.0(_ZN12wxSocketBase5_ReadEPvj+0x48)[0x7ffff6ace708] /lib64/libwx_baseu_net-2.8.so.0(_ZN12wxSocketBase4PeekEPvj+0x16)[0x7ffff6acea86] /lib64/libwx_baseu_net-2.8.so.0(_ZN10wxProtocol8ReadLineEP12wxSocketBaseR8wxString+0x103)[0x7ffff6aca6e3] /lib64/libwx_baseu_net-2.8.so.0(_ZN6wxHTTP12ParseHeadersEv+0xb5)[0x7ffff6ac8ca5] /lib64/libwx_baseu_net-2.8.so.0(_ZN6wxHTTP12BuildRequestERK8wxStringNS_10wxHTTP_ReqE+0x4ac)[0x7ffff6ac969c] /lib64/libwx_baseu_net-2.8.so.0(_ZN6wxHTTP14GetInputStreamERK8wxString+0x74)[0x7ffff6ac9d24] /usr/bin/amuled(+0x1141ad)[0x5555556681ad] /usr/bin/amuled(+0x114ba2)[0x555555668ba2] /lib64/libwx_baseu-2.8.so.0(_ZN16wxThreadInternal12PthreadStartEP8wxThread+0x115)[0x7ffff68347b5] /lib64/libpthread.so.0(+0x752a)[0x7ffff7bc652a] /lib64/libc.so.6(clone+0x6d)[0x7ffff5c5579d] ======= Memory map: ======== 555555554000-55555576e000 r-xp 00000000 fd:00 51066351 /usr/bin/amuled 55555596d000-555555978000 r--p 00219000 fd:00 51066351 /usr/bin/amuled 555555978000-555555979000 rw-p 00224000 fd:00 51066351 /usr/bin/amuled 555555979000-555555a61000 rw-p 00000000 00:00 0 [heap] 7fffe0000000-7fffe0021000 rw-p 00000000 00:00 0 7fffe0021000-7fffe4000000 ---p 00000000 00:00 0 7fffe8000000-7fffe8021000 rw-p 00000000 00:00 0 7fffe8021000-7fffec000000 ---p 00000000 00:00 0 7fffecbaa000-7fffecbab000 ---p 00000000 00:00 0 7fffecbab000-7fffed3ab000 rw-p 00000000 00:00 0 [stack:23856] 7fffed3ab000-7fffed3c2000 r-xp 00000000 fd:00 3075560 /usr/lib64/libresolv-2.20.so 7fffed3c2000-7fffed5c1000 ---p 00017000 fd:00 3075560 /usr/lib64/libresolv-2.20.so 7fffed5c1000-7fffed5c2000 r--p 00016000 fd:00 3075560 /usr/lib64/libresolv-2.20.so 7fffed5c2000-7fffed5c3000 rw-p 00017000 fd:00 3075560 /usr/lib64/libresolv-2.20.so 7fffed5c3000-7fffed5c5000 rw-p 00000000 00:00 0 7fffed5c5000-7fffed5ca000 r-xp 00000000 fd:00 3075551 /usr/lib64/libnss_dns-2.20.so 7fffed5ca000-7fffed7c9000 ---p 00005000 fd:00 3075551 /usr/lib64/libnss_dns-2.20.so 7fffed7c9000-7fffed7ca000 r--p 00004000 fd:00 3075551 /usr/lib64/libnss_dns-2.20.so 7fffed7ca000-7fffed7cb000 rw-p 00005000 fd:00 3075551 /usr/lib64/libnss_dns-2.20.so 7fffed7cb000-7fffed7cc000 ---p 00000000 00:00 0 7fffed7cc000-7fffedfcc000 rw-p 00000000 00:00 0 7fffedfcc000-7fffedfcd000 ---p 00000000 00:00 0 7fffedfcd000-7fffee7cd000 rw-p 00000000 00:00 0 [stack:23853] 7fffee7cd000-7fffee7ce000 ---p 00000000 00:00 0 7fffee7ce000-7fffeefce000 rw-p 00000000 00:00 0 [stack:23852] 7fffeefce000-7fffeefda000 r-xp 00000000 fd:00 3075553 /usr/lib64/libnss_files-2.20.so 7fffeefda000-7fffef1d9000 ---p 0000c000 fd:00 3075553 /usr/lib64/libnss_files-2.20.so 7fffef1d9000-7fffef1da000 r--p 0000b000 fd:00 3075553 /usr/lib64/libnss_files-2.20.so 7fffef1da000-7fffef1db000 rw-p 0000c000 fd:00 3075553 /usr/lib64/libnss_files-2.20.so 7fffef1db000-7fffef1dd000 r-xp 00000000 fd:00 50333993 /usr/lib64/gconv/UTF-32.so 7fffef1dd000-7fffef3dc000 ---p 00002000 fd:00 50333993 /usr/lib64/gconv/UTF-32.so 7fffef3dc000-7fffef3dd000 r--p 00001000 fd:00 50333993 /usr/lib64/gconv/UTF-32.so 7fffef3dd000-7fffef3de000 rw-p 00002000 fd:00 50333993 /usr/lib64/gconv/UTF-32.so 7fffef3de000-7ffff5951000 r--p 00000000 fd:00 35003308 /usr/lib/locale/locale-archive 7ffff5951000-7ffff5954000 r-xp 00000000 fd:00 3034929 /usr/lib64/libdl-2.20.so 7ffff5954000-7ffff5b53000 ---p 00003000 fd:00 3034929 /usr/lib64/libdl-2.20.so 7ffff5b53000-7ffff5b54000 r--p 00002000 fd:00 3034929 /usr/lib64/libdl-2.20.so 7ffff5b54000-7ffff5b55000 rw-p 00003000 fd:00 3034929 /usr/lib64/libdl-2.20.so 7ffff5b55000-7ffff5d09000 r-xp 00000000 fd:00 2933419 /usr/lib64/libc-2.20.so 7ffff5d09000-7ffff5f08000 ---p 001b4000 fd:00 2933419 /usr/lib64/libc-2.20.so 7ffff5f08000-7ffff5f0c000 r--p 001b3000 fd:00 2933419 /usr/lib64/libc-2.20.so 7ffff5f0c000-7ffff5f0e000 rw-p 001b7000 fd:00 2933419 /usr/lib64/libc-2.20.so 7ffff5f0e000-7ffff5f12000 rw-p 00000000 00:00 0 7ffff5f12000-7ffff5f28000 r-xp 00000000 fd:00 7885270 /usr/lib64/libgcc_s-4.9.2-20141101.so.1 7ffff5f28000-7ffff6127000 ---p 00016000 fd:00 7885270 /usr/lib64/libgcc_s-4.9.2-20141101.so.1 7ffff6127000-7ffff6128000 r--p 00015000 fd:00 7885270 /usr/lib64/libgcc_s-4.9.2-20141101.so.1 7ffff6128000-7ffff6129000 rw-p 00016000 fd:00 7885270 /usr/lib64/libgcc_s-4.9.2-20141101.so.1 7ffff6129000-7ffff6230000 r-xp 00000000 fd:00 3034931 /usr/lib64/libm-2.20.so 7ffff6230000-7ffff642f000 ---p 00107000 fd:00 3034931 /usr/lib64/libm-2.20.so 7ffff642f000-7ffff6430000 r--p 00106000 fd:00 3034931 /usr/lib64/libm-2.20.so 7ffff6430000-7ffff6431000 rw-p 00107000 fd:00 3034931 /usr/lib64/libm-2.20.so 7ffff6431000-7ffff6521000 r-xp 00000000 fd:00 146 /usr/lib64/libstdc++.so.6.0.20 7ffff6521000-7ffff6721000 ---p 000f0000 fd:00 146 /usr/lib64/libstdc++.so.6.0.20 7ffff6721000-7ffff6729000 r--p 000f0000 fd:00 146 /usr/lib64/libstdc++.so.6.0.20 7ffff6729000-7ffff672b000 rw-p 000f8000 fd:00 146 /usr/lib64/libstdc++.so.6.0.20 7ffff672b000-7ffff6740000 rw-p 00000000 00:00 0 7ffff6740000-7ffff6895000 r-xp 00000000 fd:00 2891897 /usr/lib64/libwx_baseu-2.8.so.0.8.0 7ffff6895000-7ffff6a95000 ---p 00155000 fd:00 2891897 /usr/lib64/libwx_baseu-2.8.so.0.8.0 7ffff6a95000-7ffff6a9d000 r--p 00155000 fd:00 2891897 /usr/lib64/libwx_baseu-2.8.so.0.8.0 7ffff6a9d000-7ffff6aa2000 rw-p 0015d000 fd:00 2891897 /usr/lib64/libwx_baseu-2.8.so.0.8.0 7ffff6aa2000-7ffff6aac000 rw-p 00000000 00:00 0 7ffff6aac000-7ffff6adb000 r-xp 00000000 fd:00 2891899 /usr/lib64/libwx_baseu_net-2.8.so.0.8.0 7ffff6adb000-7ffff6cda000 ---p 0002f000 fd:00 2891899 /usr/lib64/libwx_baseu_net-2.8.so.0.8.0 7ffff6cda000-7ffff6cdd000 r--p 0002e000 fd:00 2891899 /usr/lib64/libwx_baseu_net-2.8.so.0.8.0 7ffff6cdd000-7ffff6cde000 rw-p 00031000 fd:00 2891899 /usr/lib64/libwx_baseu_net-2.8.so.0.8.0 7ffff6cde000-7ffff6cdf000 rw-p 00000000 00:00 0 7ffff6cdf000-7ffff6ce8000 r-xp 00000000 fd:00 965248 /usr/lib64/libixml.so.2.0.8 7ffff6ce8000-7ffff6ee8000 ---p 00009000 fd:00 965248 /usr/lib64/libixml.so.2.0.8 7ffff6ee8000-7ffff6ee9000 r--p 00009000 fd:00 965248 /usr/lib64/libixml.so.2.0.8 7ffff6ee9000-7ffff6eea000 rw-p 0000a000 fd:00 965248 /usr/lib64/libixml.so.2.0.8 7ffff6eea000-7ffff6eef000 r-xp 00000000 fd:00 965250 /usr/lib64/libthreadutil.so.6.0.4 7ffff6eef000-7ffff70ee000 ---p 00005000 fd:00 965250 /usr/lib64/libthreadutil.so.6.0.4 7ffff70ee000-7ffff70ef000 r--p 00004000 fd:00 965250 /usr/lib64/libthreadutil.so.6.0.4 7ffff70ef000-7ffff70f0000 rw-p 00005000 fd:00 965250 /usr/lib64/libthreadutil.so.6.0.4 7ffff70f0000-7ffff7115000 r-xp 00000000 fd:00 965252 /usr/lib64/libupnp.so.6.3.3 7ffff7115000-7ffff7314000 ---p 00025000 fd:00 965252 /usr/lib64/libupnp.so.6.3.3 7ffff7314000-7ffff7315000 r--p 00024000 fd:00 965252 /usr/lib64/libupnp.so.6.3.3 7ffff7315000-7ffff7316000 rw-p 00025000 fd:00 965252 /usr/lib64/libupnp.so.6.3.3 7ffff7316000-7ffff7318000 rw-p 00000000 00:00 0 7ffff7318000-7ffff7742000 r-xp 00000000 fd:00 1838131 /usr/lib64/libcryptopp.so.6.0.0 7ffff7742000-7ffff7942000 ---p 0042a000 fd:00 1838131 /usr/lib64/libcryptopp.so.6.0.0 7ffff7942000-7ffff79a1000 r--p 0042a000 fd:00 1838131 /usr/lib64/libcryptopp.so.6.0.0 7ffff79a1000-7ffff79a5000 rw-p 00489000 fd:00 1838131 /usr/lib64/libcryptopp.so.6.0.0 7ffff79a5000-7ffff79a9000 rw-p 00000000 00:00 0 7ffff79a9000-7ffff79be000 r-xp 00000000 fd:00 2993097 /usr/lib64/libz.so.1.2.8 7ffff79be000-7ffff7bbd000 ---p 00015000 fd:00 2993097 /usr/lib64/libz.so.1.2.8 7ffff7bbd000-7ffff7bbe000 r--p 00014000 fd:00 2993097 /usr/lib64/libz.so.1.2.8 7ffff7bbe000-7ffff7bbf000 rw-p 00015000 fd:00 2993097 /usr/lib64/libz.so.1.2.8 7ffff7bbf000-7ffff7bd6000 r-xp 00000000 fd:00 3075558 /usr/lib64/libpthread-2.20.so 7ffff7bd6000-7ffff7dd5000 ---p 00017000 fd:00 3075558 /usr/lib64/libpthread-2.20.so 7ffff7dd5000-7ffff7dd6000 r--p 00016000 fd:00 3075558 /usr/lib64/libpthread-2.20.so 7ffff7dd6000-7ffff7dd7000 rw-p 00017000 fd:00 3075558 /usr/lib64/libpthread-2.20.so 7ffff7dd7000-7ffff7ddb000 rw-p 00000000 00:00 0 7ffff7ddb000-7ffff7dfc000 r-xp 00000000 fd:00 2500 /usr/lib64/ld-2.20.so 7ffff7fe1000-7ffff7fec000 rw-p 00000000 00:00 0 7ffff7fed000-7ffff7ff0000 rw-p 00000000 00:00 0 7ffff7ff0000-7ffff7ff7000 r--s 00000000 fd:00 50334015 /usr/lib64/gconv/gconv-modules.cache 7ffff7ff7000-7ffff7ff8000 rw-p 00000000 00:00 0 7ffff7ff8000-7ffff7ffa000 r--p 00000000 00:00 0 [vvar] 7ffff7ffa000-7ffff7ffc000 r-xp 00000000 00:00 0 [vdso] 7ffff7ffc000-7ffff7ffd000 r--p 00021000 fd:00 2500 /usr/lib64/ld-2.20.so 7ffff7ffd000-7ffff7ffe000 rw-p 00022000 fd:00 2500 /usr/lib64/ld-2.20.so 7ffff7ffe000-7ffff7fff000 rw-p 00000000 00:00 0 7ffffffde000-7ffffffff000 rw-p 00000000 00:00 0 [stack] ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0 [vsyscall] Program received signal SIGABRT, Aborted. [Switching to Thread 0x7fffeefcd700 (LWP 23852)] 0x00007ffff5b898c7 in __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:55 ??/usr/src/debug/glibc-2.20/sysdeps/unix/sysv/linux/raise.c:55:1823:beg:0x7ffff5b898c7 (gdb) q A debugging session is active. Inferior 1 [process 23844] will be killed. Quit anyway? (y or n) y | |||||||||
Steps To Reproduce | - create a non root account on the linux box - run amuled to create a basic config, enable remote connections and set a password - run amuled - buffer overflow, crash | |||||||||
Additional Information | Those the different components/deps versions: amule 2.3.1-7.fc21 cryptopp 5.6.2-5.fc21 expat 2.1.0-10.fc21 gcc 4.9.2-1.fc21 gcc-base 4.9.2-1.fc21 glibc 2.20-7.fc21 glibc-common 2.20-7.fc21 libupnp 1.6.19-3.fc21 wxGTK 2.8.12-13.fc21 zlib 1.2.8-7.fc21 | |||||||||
Tags | No tags attached. | |||||||||
Relationships |
| |||||||||
Attached Files | ||||||||||
Issue History | ||||||||||
Date Modified | Username | Field | Change | |||||||
2015-01-31 10:14 | deadhead | New Issue | ||||||||
2015-01-31 10:18 | deadhead | Note Added: 0003649 | ||||||||
2015-01-31 10:22 | deadhead | Note Added: 0003650 | ||||||||
2016-10-18 02:32 | GonoszTopi | Relationship added | duplicate of 0001722 |
Notes | |||||
|
|||||
|
|
||||
|
|||||
|
|