aide segfaults on Ubuntu 20.10

Bug #1903298 reported by Thomas Sjögren
18
This bug affects 4 people
Affects Status Importance Assigned to Milestone
aide (Ubuntu)
Confirmed
Undecided
Unassigned

Bug Description

ProblemType: Crash
Architecture: amd64
Date: Fri Nov 6 12:24:09 2020
DistroRelease: Ubuntu 20.10
ExecutablePath: /usr/bin/aide
ExecutableTimestamp: 1568007760
ProcCmdline: /usr/bin/aide --config /var/lib/aide/aide.conf.autogenerated --init
ProcCwd: /home/vagrant

~$ sudo aideinit
Overwrite existing /var/lib/aide/aide.db.new [Yn]? y
Running aide --init...
Segmentation fault (core dumped)
AIDE --init return code 139
~$ sudo dmesg | tail -n5
[ 67.273286] pcnet32 0000:00:08.0 enp0s8: link up, 100Mbps, full-duplex
[ 185.420840] aide[34396]: segfault at e5 ip 00007fe4eba180c4 sp 00007ffe3e391880 error 4 in libc-2.32.so[7fe4eb8fd000+16d000]
[ 185.420847] Code: ff 48 85 c0 0f 84 99 00 00 00 41 80 3c 24 ff 0f 85 b4 00 00 00 48 8b 05 1a 1d 0a 00 49 0f be 16 4c 89 f5 64 48 8b 08 48 89 d0 <f6> 44 51 01 20 74 18 0f 1f 44 00 00 48 0f be 55 01 48 83 c5 01 48
[ 1857.315719] aide[39500]: segfault at e5 ip 00007f01f83c30c4 sp 00007ffeb0007760 error 4 in libc-2.32.so[7f01f82a8000+16d000]
[ 1857.315725] Code: ff 48 85 c0 0f 84 99 00 00 00 41 80 3c 24 ff 0f 85 b4 00 00 00 48 8b 05 1a 1d 0a 00 49 0f be 16 4c 89 f5 64 48 8b 08 48 89 d0 <f6> 44 51 01 20 74 18 0f 1f 44 00 00 48 0f be 55 01 48 83 c5 01 48
~$ lsb_release -rd ; uname -r
Description: Ubuntu 20.10
Release: 20.10
5.8.0-26-generic
~$

Tags: aide segfault
Revision history for this message
Thomas Sjögren (thomas-sjogren-k) wrote :

crash report

Revision history for this message
Thomas Sjögren (thomas-sjogren-k) wrote :

Vagrant configuration:

Vagrant.configure("2") do |config|
  config.vbguest.installer_options = { allow_kernel_upgrade: true }
  config.vm.provider "virtualbox" do |vb|
    vb.default_nic_type = "Am79C973"
    vb.memory = 2048
    vb.customize ["modifyvm", :id, "--uart1", "0x3F8", "4"]
    vb.customize ["modifyvm", :id, "--uartmode1", "file", File::NULL]
  end

  config.vm.define "groovy" do |groovy|
    groovy.vm.box = "ubuntu/groovy64"
    groovy.ssh.insert_key = true
    groovy.vm.network "private_network", ip: "10.2.0.2"
    groovy.vm.hostname = "groovy"
    groovy.vm.boot_timeout = 600
    groovy.vm.synced_folder ".", "/vagrant", disabled: true
  end
end

Revision history for this message
Thomas Sjögren (thomas-sjogren-k) wrote :

Focal test:

Vagrant.configure("2") do |config|
  config.vbguest.installer_options = { allow_kernel_upgrade: true }
  config.vm.provider "virtualbox" do |vb|
    vb.default_nic_type = "Am79C973"
    vb.memory = 2048
    vb.customize ["modifyvm", :id, "--uart1", "0x3F8", "4"]
    vb.customize ["modifyvm", :id, "--uartmode1", "file", File::NULL]
  end

  config.vm.define "focal" do |focal|
    focal.vm.box = "ubuntu/focal64"
    focal.ssh.insert_key = true
    focal.vm.network "private_network", ip: "10.2.0.2"
    focal.vm.hostname = "focal"
    focal.vm.boot_timeout = 600
    focal.vm.synced_folder ".", "/vagrant", disabled: true
  end
end

$ vagrant up
[...]
$ vagrant ssh
vagrant@focal:~$ sudo apt-get -y update && sudo apt-get -y install aide
[...]
vagrant@focal:~$ lsb_release -rd ; uname -r
Description: Ubuntu 20.04.1 LTS
Release: 20.04
5.4.0-52-generic
vagrant@focal:~$ sudo aideinit
Running aide --init...
Start timestamp: 2020-11-06 13:07:03 +0000 (AIDE 0.16.1)
AIDE initialized database at /var/lib/aide/aide.db.new
Verbose level: 6

Number of entries: 93530

---------------------------------------------------
The attributes of the (uncompressed) database(s):
---------------------------------------------------

/var/lib/aide/aide.db.new
  RMD160 : MNUAdyVW6+zr3EWQbL3ZpcmqXaI=
  TIGER : De3L4UYBmrSGSAlD+5Ok8fDjapaatMF1
  SHA256 : tKRdyIa56UNitK+eYJHBAZ7juSNk1/Jz
             GV5LhH9kw4c=
  SHA512 : zO/G5Yc6oL5akbFd++auqEQWp9LWqKS5
             P6fa4Ls0qLBQOwNlxfz9GdOag+ZHZQmM
             ZlewBYTNIEzmC5Ff5mvF7A==
  CRC32 : snNRGQ==
  HAVAL : fF0HdP6bH2HyGD+WxZf+PSn6rsaq77En
             qQHbSlWR15Y=
  GOST : nz/OdMEwJE5gdCxWEK+lE+Q1XuzQ2zdI
             E6oy3gvmcy0=

End timestamp: 2020-11-06 13:08:52 +0000 (run time: 1m 49s)
vagrant@focal:~$

Revision history for this message
Koen (koen-beek) wrote :
Changed in aide (Ubuntu):
status: New → Confirmed
Revision history for this message
Koen (koen-beek) wrote :

also crashes in development release 21.10

root@koen-VirtualBox:/var/crash# ls -lrt
total 416
-rw-r----- 1 root whoopsie 425471 Dez 15 18:08 _usr_bin_aide.0.crash

root@koen-VirtualBox:/var/crash# sudo dmesg | tail -n5
[ 90.657264] rfkill: input handler disabled
[ 1493.234716] aide[21779]: segfault at e5 ip 00007f10e9a02ee4 sp 00007ffe42f012e0 error 4 in libc-2.32.so[7f10e98e8000+16d000]
[ 1493.234721] Code: ff 48 85 c0 0f 84 99 00 00 00 41 80 3c 24 ff 0f 85 b4 00 00 00 48 8b 05 fa 0e 0a 00 49 0f be 16 4c 89 f5 64 48 8b 08 48 89 d0 <f6> 44 51 01 20 74 18 0f 1f 44 00 00 48 0f be 55 01 48 83 c5 01 48
[ 1688.321670] aide[24107]: segfault at e5 ip 00007f3e5e79aee4 sp 00007ffdcfb899a0 error 4 in libc-2.32.so[7f3e5e680000+16d000]
[ 1688.321680] Code: ff 48 85 c0 0f 84 99 00 00 00 41 80 3c 24 ff 0f 85 b4 00 00 00 48 8b 05 fa 0e 0a 00 49 0f be 16 4c 89 f5 64 48 8b 08 48 89 d0 <f6> 44 51 01 20 74 18 0f 1f 44 00 00 48 0f be 55 01 48 83 c5 01 48

root@koen-VirtualBox:/var/crash# lsb_release -rd; uname -r
Description: Ubuntu Hirsute Hippo (development branch)
Release: 21.04
5.8.0-25-generic

Revision history for this message
Mark Thornton (mark-thornton) wrote :

Also on Ubuntu 20.04.2 LTS
apt list --installed 'aide*'
Listing... Done
aide-common/focal,now 0.16.1-1build2 all [installed]
aide/focal,now 0.16.1-1build2 amd64 [installed]

 sudo aideinit
[sudo] password for mark:
2.pgw1.enactorondemand.co.uk - 10.160.91.30Sorry, try again.
[sudo] password for mark:
Sorry, try again.
[sudo] password for mark:
Overwrite existing /var/lib/aide/aide.db.new [Yn]? Y
Running aide --init...
Entry /var/log/audit/audit.log was changed so that hash cannot be calculated for it
Attribute size has been changed
Segmentation fault (core dumped)
AIDE --init return code 139

[43078.066053] SGI XFS with ACLs, security attributes, realtime, no debug enabled
[44182.224175] aide[17221]: segfault at 0 ip 00007f5eb462a14b sp 00007ffd4f828808 error 4 in libc-2.31.so[7f5eb452f000+178000]
[44182.224181] Code: 89 01 48 83 c8 ff c3 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 48 8b 05 25 ad 0c 00 48 83 ff 10 74 47 48 83 ff 1a 74 49 48 8b 40 60 <48> 8b 10 48 85 d2 75 12 eb 1b 0f 1f 00 48 8b 50 10 48 83 c0 10 48
[54591.031441] aide[21832]: segfault at 0 ip 00007f131dea114b sp 00007ffcfe203808 error 4 in libc-2.31.so[7f131dda6000+178000]
[54591.031448] Code: 89 01 48 83 c8 ff c3 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 48 8b 05 25 ad 0c 00 48 83 ff 10 74 47 48 83 ff 1a 74 49 48 8b 40 60 <48> 8b 10 48 85 d2 75 12 eb 1b 0f 1f 00 48 8b 50 10 48 83 c0 10 48

Revision history for this message
Thomas Sjögren (thomas-sjogren-k) wrote :

Works as expected on Impish.

~$ apt list --installed 'aide*'
Listing... Done
aide-common/impish,now 0.17.3-1 all [installed,automatic]
aide/impish,now 0.17.3-1 amd64 [installed]
~$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu Impish Indri (development branch)
Release: 21.10
Codename: impish
~$ sudo aideinit
Running aide --init...
 Start timestamp: 2021-04-30 08:57:34 +0000 (AIDE 0.17.3)
AIDE initialized database at /var/lib/aide/aide.db.new

Number of entries: 96211

---------------------------------------------------
The attributes of the (uncompressed) database(s):
---------------------------------------------------

/var/lib/aide/aide.db.new
 SHA256 : funWGABAigCJME2UCNgsYrTwfuliEyXW
             mv9wIr4+U4A=
 SHA512 : HNC/xA7RC8h8R7SJND3Dgprz6hVGoX1Y
             NXiYY6aqpAZj8alRqOuG8sut4oVI5f5e
             f+nndg1+pLDXfdutsZ7hYA==
 RMD160 : 4QYTyyypS8438vFj0G4e2sDe0CI=
 TIGER : fGYFcceEA9iWq1Zxo1xi1+ymlNJ7fb6l
 CRC32 : qIQgUg==
 HAVAL : Cjgfrh9d6lG90D8IlpE82wbapZI+GNZ/
             l1R3XF63ipM=
 WHIRLPOOL : tMsrhxJRkPsq0+iOfXDFrwp46GJvCH4a
             izQk1EYGEUWBcESuDGsFah6XohCQUpOl
             S6k80ih4ASDVnLJcF4NMWQ==
 GOST : Hm7LL9XEuCXwDPwiMK3YRQZQm4lIquJx
             G8SDGfljTZA=

End timestamp: 2021-04-30 08:59:48 +0000 (run time: 2m 14s)

Revision history for this message
Konstantin Kalmykov (kkblkkbl) wrote :
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.