cups-browsed crashed with SIGSEGV in __strncasecmp_l_avx()

[Matthias Klose]

seen with current focal

ProblemType: Crash
DistroRelease: Ubuntu 20.04
Package: cups-browsed 1.27.0-2
ProcVersionSignature: Ubuntu 5.4.0-14.17-generic 5.4.18
Uname: Linux 5.4.0-12-generic x86_64
NonfreeKernelModules: nvidia_modeset nvidia
ApportVersion: 2.20.11-0ubuntu16
Architecture: amd64
CupsErrorLog:

Date: Fri Feb 14 07:21:58 2020
ExecutablePath: /usr/sbin/cups-browsed
InstallationDate: Installed on 2019-01-12 (401 days ago)
InstallationMedia: Ubuntu 18.10 "Cosmic Cuttlefish" - Release amd64 (20181017.3)
Lpstat:
 device for Canon_MG2900_series_Martin_s_MacBook: ///dev/null
 device for DYMO_LabelWriter_4XL_Lily_s_MacBook_Pro: ///dev/null
 device for EPSON_Epson_Stylus_Office_BX925_MacBook_Pro_de_Justine: ///dev/null
 device for HP_LaserJet_MFP_M129_M134_Akilesh_s_MacBook_Air: ///dev/null
 device for IBC_Bur_7_MacBook_Pro_de_gregory: ///dev/null
MachineType: LENOVO 20MFCTO1WW
Papersize: letter
ProcAttrCurrent: /usr/sbin/cups-browsed (enforce)
ProcCmdline: /usr/sbin/cups-browsed
ProcKernelCmdLine: BOOT_IMAGE=/vmlinuz-5.4.0-14-generic root=/dev/mapper/ubuntu--vg-root ro quiet splash vt.handoff=7
SegvAnalysis:
 Segfault happened at: 0x7fab29a23c5f <__strncasecmp_l_avx+91>: vmovdqu (%rdi),%xmm1
 PC (0x7fab29a23c5f) ok
 source "(%rdi)" (0x00000000) not located in a known VMA region (needed readable region)!
 destination "%xmm1" ok
SegvReason: reading NULL VMA
Signal: 11
SourcePackage: cups-filters
StacktraceTop:
 __strncasecmp_l_avx () at ../sysdeps/x86_64/multiarch/strcmp-sse42.S:199
 ?? ()
 ?? ()
 avahi_service_resolver_event () from /usr/lib/x86_64-linux-gnu/libavahi-client.so.3
 ?? () from /usr/lib/x86_64-linux-gnu/libavahi-client.so.3
Title: cups-browsed crashed with SIGSEGV in __strncasecmp_l_avx()
UpgradeStatus: No upgrade log present (probably fresh install)
UserGroups:

dmi.bios.date: 10/28/2019
dmi.bios.vendor: LENOVO
dmi.bios.version: N2EET43W (1.25 )
dmi.board.asset.tag: Not Available
dmi.board.name: 20MFCTO1WW
dmi.board.vendor: LENOVO
dmi.board.version: SDK0J40697 WIN
dmi.chassis.asset.tag: No Asset Information
dmi.chassis.type: 10
dmi.chassis.vendor: LENOVO
dmi.chassis.version: None
dmi.modalias: dmi:bvnLENOVO:bvrN2EET43W(1.25):bd10/28/2019:svnLENOVO:pn20MFCTO1WW:pvrThinkPadX1Extreme:rvnLENOVO:rn20MFCTO1WW:rvrSDK0J40697WIN:cvnLENOVO:ct10:cvrNone:
dmi.product.family: ThinkPad X1 Extreme
dmi.product.name: 20MFCTO1WW
dmi.product.sku: LENOVO_MT_20MF_BU_Think_FM_ThinkPad X1 Extreme
dmi.product.version: ThinkPad X1 Extreme
dmi.sys.vendor: LENOVO
separator:

[Apport retracing service (apport)]

StacktraceTop:
 __strncasecmp_l_avx () at ../sysdeps/x86_64/multiarch/strcmp-sse42.S:199
 is_local_hostname ()
 resolve_callback ()
 avahi_service_resolver_event (client=client@entry=0x55e962d87b60, event=event@entry=AVAHI_RESOLVER_FAILURE, message=message@entry=0x55e962d8b250) at resolver.c:165
 filter_func (bus=<optimized out>, message=0x55e962d8b250, userdata=0x55e962d87b60) at client.c:258

[Till Kamppeter (till-kamppeter)]

I have added some crash guards to the is_local_hostname() function in cups-browsed:

https://github.com/OpenPrinting/cups-filters/commit/4157690bf0a40be1030ed19da7f70d41b9f27f86

I hope this helps.

[Till Kamppeter (till-kamppeter)]

I have released cups-filters 1.27.2 upstream with several added crash guards in cups-browsed now. It will soon get into Focal.

[Launchpad Janitor (janitor)]

This bug was fixed in the package cups-filters - 1.27.2-1

---------------
cups-filters (1.27.2-1) unstable; urgency=medium

  * New 1.27.2 upstream release
    - cups-browsed: Additional checks against crashes in the
      is_local_hostname() function (LP: #1863716)
    - foomatic-rip: Zero-page-job handling changes made the last
      page of PostScript files not printed, also turning one-page
      jobs into zero-page jobs; so drop upstream backport patch.

 -- Didier Raboud <email address hidden> Fri, 28 Feb 2020 20:12:44 +0100