crash with python 2.5 (double free)

Bug #116944 reported by Laurent Bigonville
10
Affects Status Importance Assigned to Milestone
python-pam (Ubuntu)
Fix Released
Undecided
Unassigned
Feisty
Won't Fix
Undecided
Unassigned

Bug Description

Binary package hint: python-pam

the module always crashes with python 2.5

*** glibc detected *** /usr/bin/python: free(): invalid pointer: 0xb7d131c0 ***
======= Backtrace: =========
/lib/tls/i686/cmov/libc.so.6[0xb7de2f7d]
/lib/tls/i686/cmov/libc.so.6(cfree+0x90)[0xb7de65c0]
/usr/lib/python2.5/site-packages/PAMmodule.so[0xb7cb3ef6]
/usr/bin/python[0x8082f19]
/usr/bin/python(PyDict_SetItem+0x6e)[0x808487e]
/usr/bin/python(_PyModule_Clear+0x158)[0x80864d8]
/usr/bin/python(PyImport_Cleanup+0x153)[0x80da963]
/usr/bin/python(Py_Finalize+0xbf)[0x80e6b5f]
/usr/bin/python(Py_Main+0x4ce)[0x8056aae]
/usr/bin/python(main+0x22)[0x80564d2]
/lib/tls/i686/cmov/libc.so.6(__libc_start_main+0xdc)[0xb7d90ebc]
/usr/bin/python[0x8056421]
======= Memory map: ========
08048000-0813c000 r-xp 00000000 08:02 638614 /usr/bin/python2.5
0813c000-08161000 rw-p 000f3000 08:02 638614 /usr/bin/python2.5
08161000-081da000 rw-p 08161000 00:00 0 [heap]
b7a00000-b7a21000 rw-p b7a00000 00:00 0
b7a21000-b7b00000 ---p b7a21000 00:00 0
b7bc9000-b7bd2000 r-xp 00000000 08:02 83151 /lib/tls/i686/cmov/libnss_files-2.5.so
b7bd2000-b7bd4000 rw-p 00008000 08:02 83151 /lib/tls/i686/cmov/libnss_files-2.5.so
b7bd4000-b7bdc000 r-xp 00000000 08:02 83208 /lib/tls/i686/cmov/libnss_nis-2.5.so
b7bdc000-b7bde000 rw-p 00007000 08:02 83208 /lib/tls/i686/cmov/libnss_nis-2.5.so
b7c35000-b7c48000 r-xp 00000000 08:02 83148 /lib/tls/i686/cmov/libnsl-2.5.so
b7c48000-b7c4a000 rw-p 00012000 08:02 83148 /lib/tls/i686/cmov/libnsl-2.5.so
b7c4a000-b7c4c000 rw-p b7c4a000 00:00 0
b7c89000-b7c93000 r-xp 00000000 08:02 81824 /lib/libgcc_s.so.1
b7c93000-b7c94000 rw-p 0000a000 08:02 81824 /lib/libgcc_s.so.1
b7ca7000-b7ca9000 r-xp 00000000 08:02 408856 /lib/libpam_misc.so.0.79
b7ca9000-b7caa000 rw-p 00001000 08:02 408856 /lib/libpam_misc.so.0.79
b7caa000-b7cb1000 r-xp 00000000 08:02 408855 /lib/libpam.so.0.79
b7cb1000-b7cb2000 rw-p 00007000 08:02 408855 /lib/libpam.so.0.79
b7cb2000-b7cb5000 r-xp 00000000 08:02 721794 /usr/lib/python2.5/site-packages/PAMmodule.so
b7cb5000-b7cb6000 rw-p 00002000 08:02 721794 /usr/lib/python2.5/site-packages/PAMmodule.so
b7cb6000-b7cbd000 r--s 00000000 08:02 654667 /usr/lib/gconv/gconv-modules.cache
b7cbd000-b7cf8000 r--p 00000000 08:02 670959 /usr/lib/locale/fr_BE.utf8/LC_CTYPE
b7cf8000-b7d7b000 rw-p b7cf8000 00:00 0
b7d7b000-b7eb9000 r-xp 00000000 08:02 83142 /lib/tls/i686/cmov/libc-2.5.so
b7eb9000-b7eba000 r--p 0013e000 08:02 83142 /lib/tls/i686/cmov/libc-2.5.so
b7eba000-b7ebc000 rw-p 0013f000 08:02 83142 /lib/tls/i686/cmov/libc-2.5.so
b7ebc000-b7ebf000 rw-p b7ebc000 00:00 0
b7ebf000-b7ee4000 r-xp 00000000 08:02 83146 /lib/tls/i686/cmov/libm-2.5.so
b7ee4000-b7ee6000 rw-p 00024000 08:02 83146 /lib/tls/i686/cmov/libm-2.5.so
b7ee6000-b7ee8000 r-xp 00000000 08:02 83663 /lib/tls/i686/cmov/libutil-2.5.so
b7ee8000-b7eea000 rw-p 00001000 08:02 83663 /lib/tls/i686/cmov/libutil-2.5.so
b7eea000-b7eeb000 rw-p b7eea000 00:00 0
b7eeb000-b7eed000 r-xp 00000000 08:02 83145 /lib/tls/i686/cmov/libdl-2.5.so
b7eed000-b7eef000 rw-p 00001000 08:02 83145 /lib/tls/i686/cmov/libdl-2.5.so
b7eef000-b7f03000 r-xp 00000000 08:02 83658 /lib/tls/i686/cmov/libpthread-2.5.so
b7f03000-b7f05000 rw-p 00013000 08:02 83658 /lib/tls/i686/cmov/libpthread-2.5.so
b7f05000-b7f07000 rw-p b7f05000 00:00 0
b7f0a000-b7f0b000 rw-p b7f0a000 00:00 0
b7f0b000-b7f12000 r-xp 00000000 08:02 83149 /lib/tls/i686/cmov/libnss_compat-2.5.so
b7f12000-b7f14000 rw-p 00006000 08:02 83149 /lib/tls/i686/cmov/libnss_compat-2.5.so
b7f14000-b7f15000 rw-p b7f14000 00:00 0
b7f15000-b7f18000 r-xp 00000000 08:02 132156 /usr/lib/python2.5/lib-dynload/termios.so
b7f18000-b7f1a000 rw-p 00002000 08:02 132156 /usr/lib/python2.5/lib-dynload/termios.so
b7f1a000-b7f1c000 rw-p b7f1a000 00:00 0
b7f1c000-b7f35000 r-xp 00000000 08:02 81893 /lib/ld-2.5.so
b7f35000-b7f37000 rw-p 00019000 08:02 81893 /lib/ld-2.5.so
bfad7000-bfaed000 rw-p bfad7000 00:00 0 [stack]
ffffe000-fffff000 r-xp 00000000 00:00 0 [vdso]

Revision history for this message
Laurent Bigonville (bigon) wrote :

#0 0xffffe410 in ?? ()
#1 0xbfd6422c in ?? ()
#2 0x00000006 in ?? ()
#3 0x00000430 in ?? ()
#4 0xb7e08df0 in raise () from /lib/tls/i686/cmov/libc.so.6
#5 0xb7e0a641 in abort () from /lib/tls/i686/cmov/libc.so.6
#6 0xb7e3f11b in __libc_message () from /lib/tls/i686/cmov/libc.so.6
#7 0xb7e46f7d in _int_free () from /lib/tls/i686/cmov/libc.so.6
#8 0xb7e4a5c0 in free () from /lib/tls/i686/cmov/libc.so.6
#9 0xb7d17ef6 in PyPAM_dealloc (self=0xb7d771c0) at PAMmodule.c:489
#10 0x08082f19 in insertdict (mp=0xb7db7acc, key=0xb7d738c0, hash=-700138930, value=0x8143db8) at ../Objects/dictobject.c:412
#11 0x0808487e in PyDict_SetItem (op=0xb7db7acc, key=0xb7d738c0, value=0x8143db8) at ../Objects/dictobject.c:637
#12 0x080864d8 in _PyModule_Clear (m=0xb7d9e0ec) at ../Objects/moduleobject.c:136
#13 0x080da963 in PyImport_Cleanup () at ../Python/import.c:433
#14 0x080e6b5f in Py_Finalize () at ../Python/pythonrun.c:397
#15 0x08056aae in Py_Main (argc=1, argv=0xbfd64d04) at ../Modules/main.c:545
#16 0x080564d2 in main (argc=Cannot access memory at address 0x430
) at ../Modules/python.c:23

Revision history for this message
Laurent Bigonville (bigon) wrote :

Fixed with last upload (0.4.2-12ubuntu1) to gutsy

Revision history for this message
Dan (danser) wrote :

0.4.2-12ubuntu1 builds with a couple of debhelper warnings on feisty, and fixes the problem.

Revision history for this message
Matthias Klose (doko) wrote :

please attach a debdiff for a feisty update

Changed in python-pam:
status: New → In Progress
status: New → Fix Released
status: In Progress → Incomplete
Revision history for this message
Hew (hew) wrote :

Ubuntu Feisty Fawn is no longer supported, so a SRU will not be issued for this release. Marking Feisty as Won't Fix.

Changed in python-pam:
status: Incomplete → Won't Fix
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.