buffer overflow in amsynth in 8.10

[Peter Nelson]

Binary package hint: amsynth

$ amsynth
amSynth 1.2.0
Copyright 2001-2006 Nick Dowell and others.
amSynth comes with ABSOLUTELY NO WARRANTY
This is free software, and you are welcome to redistribute it
under certain conditions; see the file COPYING for details
loaded & initialised libjack.so :)
SSE2 detected
SSE2 detected
/usr/bin/vkeybd
*** buffer overflow detected ***: amsynth terminated
======= Backtrace: =========
/lib/libc.so.6(__fortify_fail+0x37)[0x7f97c623e887]
/lib/libc.so.6[0x7f97c623c750]
/lib/libc.so.6[0x7f97c623bae9]
/lib/libc.so.6(_IO_default_xsputn+0x96)[0x7f97c61b7116]
/lib/libc.so.6(_IO_vfprintf+0x176)[0x7f97c61867f6]
/lib/libc.so.6(__vsprintf_chk+0x9d)[0x7f97c623bb8d]
/lib/libc.so.6(__sprintf_chk+0x80)[0x7f97c623bad0]
amsynth[0x428f6e]
amsynth[0x40fe21]
/lib/libc.so.6(__libc_start_main+0xe6)[0x7f97c615d466]
amsynth[0x40f209]
======= Memory map: ========
00400000-00459000 r-xp 00000000 08:02 2199010 /usr/bin/amsynth
00658000-0067e000 rw-p 00058000 08:02 2199010 /usr/bin/amsynth
0067e000-0067f000 rw-p 0067e000 00:00 0
00ead000-0112d000 rw-p 00ead000 00:00 0 [heap]
40761000-40762000 ---p 40761000 00:00 0
40762000-40f62000 rw-p 40762000 00:00 0
4155b000-4155c000 ---p 4155b000 00:00 0
4155c000-41d5c000 rw-p 4155c000 00:00 0
7f97c0fef000-7f97c0ff3000 r-xp 00000000 08:02 737861 /usr/lib/gtk-2.0/2.10.0/loaders/libpixbufloader-png.so
7f97c0ff3000-7f97c11f3000 ---p 00004000 08:02 737861 /usr/lib/gtk-2.0/2.10.0/loaders/libpixbufloader-png.so
7f97c11f3000-7f97c11f4000 r--p 00004000 08:02 737861 /usr/lib/gtk-2.0/2.10.0/loaders/libpixbufloader-png.so
7f97c11f4000-7f97c11f5000 rw-p 00005000 08:02 737861 /usr/lib/gtk-2.0/2.10.0/loaders/libpixbufloader-png.so
7f97c11f5000-7f97c1216000 r-xp 00000000 08:02 2343117 /usr/lib/gtk-2.0/2.10.0/engines/libmurrine.so
7f97c1216000-7f97c1415000 ---p 00021000 08:02 2343117 /usr/lib/gtk-2.0/2.10.0/engines/libmurrine.so
7f97c1415000-7f97c1416000 r--p 00020000 08:02 2343117 /usr/lib/gtk-2.0/2.10.0/engines/libmurrine.so
7f97c1416000-7f97c1417000 rw-p 00021000 08:02 2343117 /usr/lib/gtk-2.0/2.10.0/engines/libmurrine.so
7f97c1417000-7f97c1422000 r-xp 00000000 08:02 181155 /lib/libnss_files-2.8.90.so
7f97c1422000-7f97c1621000 ---p 0000b000 08:02 181155 /lib/libnss_files-2.8.90.so
7f97c1621000-7f97c1622000 r--p 0000a000 08:02 181155 /lib/libnss_files-2.8.90.so
7f97c1622000-7f97c1623000 rw-p 0000b000 08:02 181155 /lib/libnss_files-2.8.90.so
7f97c1623000-7f97c162d000 r-xp 00000000 08:02 181157 /lib/libnss_nis-2.8.90.so
7f97c162d000-7f97c182c000 ---p 0000a000 08:02 181157 /lib/libnss_nis-2.8.90.so
7f97c182c000-7f97c182d000 r--p 00009000 08:02 181157 /lib/libnss_nis-2.8.90.so
7f97c182d000-7f97c182e000 rw-p 0000a000 08:02 181157 /lib/libnss_nis-2.8.90.so
7f97c182e000-7f97c1844000 r-xp 00000000 08:02 181152 /lib/libnsl-2.8.90.so
7f97c1844000-7f97c1a43000 ---p 00016000 08:02 181152 /lib/libnsl-2.8.90.so
7f97c1a43000-7f97c1a44000 r--p 00015000 08:02 181152 /lib/libnsl-2.8.90.so
7f97c1a44000-7f97c1a45000 rw-p 00016000 08:02 181152 /lib/libnsl-2.8.90.so
7f97c1a45000-7f97c1a47000 rw-p 7f97c1a45000 00:00 0
7f97c1a47000-7f97c1a4f000 r-xp 00000000 08:02 181153 /lib/libnss_compat-2.8.90.so
7f97c1a4f000-7f97c1c4e000 ---p 00008000 08:02 181153 /lib/libnss_compat-2.8.90.so
7f97c1c4e000-7f97c1c4f000 r--p 00007000 08:02 181153 /lib/libnss_compat-2.8.90.so
7f97c1c4f000-7f97c1c50000 rw-p 00008000 08:02 181153 /lib/libnss_compat-2.8.90.so
7f97c1c6c000-7f97c1c71000 r--p 00000000 08:02 2230304 /usr/share/locale-langpack/en_GB/LC_MESSAGES/gtk20.mo
7f97c1c71000-7f97c1cb0000 r--p 00000000 08:02 2247146 /usr/lib/locale/en_GB.utf8/LC_CTYPE
7f97c1cb0000-7f97c1cb1000 r--p 00000000 08:02 2230327 /usr/lib/locale/en_GB.utf8/LC_NUMERIC
7f97c1cb1000-7f97c1cb2000 r--p 00000000 08:02 2230194 /usr/lib/locale/en_GB.utf8/LC_TIME
7f97c1cb2000-7f97c1d93000 r--p 00000000 08:02 2247147 /usr/lib/locale/en_GB.utf8/LC_COLLATE
7f97c1d93000-7f97c1e93000 rw-s 00000000 00:09 10682497 /SYSV00000000 (deleted)
7f97c1e93000-7f97c1ea4000 r-xp 00000000 08:02 2201548 /usr/lib/libjack.so.0.0.28
7f97c1ea4000-7f97c20a3000 ---p 00011000 08:02 2201548 /usr/lib/libjack.so.0.0.28
7f97c20a3000-7f97c20a4000 r--p 00010000 08:02 2201548 /usr/lib/libjack.so.0.0.28
7f97c20a4000-7f97c20a6000 rw-p 00011000 08:02 2201548 /usr/lib/libjack.so.0.0.28
7f97c20a6000-7f97c20ae000 rw-p 7f97c20a6000 00:00 0
7f97c20ae000-7f97c20b3000 r-xp 00000000 08:02 2202124 /usr/lib/libXdmcp.so.6.0.0
7f97c20b3000-7f97c22b2000 ---p 00005000 08:02 2202124 /usr/lib/libXdmcp.so.6.0.0
7f97c22b2000-7f97c22b3000 rw-p 00004000 08:02 2202124 /usr/lib/libXdmcp.so.6.0.0
7f97c22b3000-7f97c22b5000 r-xp 00000000 08:02 2202118 /usr/lib/libXau.so.6.0.0
7f97c22b5000-7f97c24b4000 ---p 00002000 08:02 2202118 /usr/lib/libXau.so.6.0.0
7f97c24b4000-7f97c24b5000 rw-p 00001000 08:02 2202118 /usr/lib/libXau.so.6.0.0
7f97c24b5000-7f97c24b6000 r-xp 00000000 08:02 2195688 /usr/lib/libxcb-xlib.so.0.0.0
7f97c24b6000-7f97c26b5000 ---p 00001000 08:02 2195688 /usr/lib/libxcb-xlib.so.0.0.0
7f97c26b5000-7f97c26b6000 r--p 00000000 08:02 2195688 /usr/lib/libxcb-xlib.so.0.0.0
7f97c26b6000-7f97c26b7000 rw-p 00001000 08:02 2195688 /usr/lib/libxcb-xlib.so.0.0.0
7f97c26b7000-7f97c26de000 r-xp 00000000 08:02 2200130 /usr/lib/libexpat.so.1.5.2
7f97c26de000-7f97c28de000 ---p 00027000 08:02 2200130 /usr/lib/libexpat.so.1.5.2
7f97c28de000-7f97c28e0000 r--p 00027000 08:02 2200130 /usr/lib/libexpat.so.1.5.2
7f97c28e0000-7f97c28e1000 rw-p 00029000 08:02 2200130 /usr/lib/libexpat.so.1.5.2
7f97c28e1000-7f97c28fb000 r-xp 00000000 08:02 180494 /lib/libselinux.so.1
7f97c28fb000-7f97c2afa000 ---p 0001a000 08:02 180494 /lib/libselinux.so.1
7f97c2afa000-7f97c2afb000 r--p 00019000 08:02 180494 /lib/libselinux.so.1
7f97c2afb000-7f97c2afc000 rw-p 0001a000 08:02 180494 /lib/libselinux.so.1
7f97c2afc000-7f97c2afd000 rw-p 7f97c2afc000 00:00 0
7f97c2afd000-7f97c2b02000 r-xp 00000000 08:02 2201290 /usr/lib/libogg.so.0.5.3
7f97c2b02000-7f97c2d01000 ---p 00005000 08:02 2201290 /usr/lib/libogg.so.0.5.3
7f97c2d01000-7f97c2d02000 r--p 00004000 08:02 2201290 /usr/lib/libogg.so.0.5.3
7f97c2d02000-7f97c2d03000 rw-p 00005000 08:02 2201290 /usr/lib/libogg.so.0.5.3
7f97c2d03000-7f97c2d2b000 r-xp 00000000 08:02 1572980 /lib/libpcre.so.3.12.1
7f97c2d2b000-7f97c2f2a000 ---p 00028000 08:02 1572980 /lib/libpcre.so.3.12.1
7f97c2f2a000-7f97c2f2b000 r--p 00027000 08:02 1572980 /lib/libpcre.so.3.12.1
7f97c2f2b000-7f97c2f2c000 rw-p 00028000 08:02 1572980 /lib/libpcre.so.3.12.1
7f97c2f2c000-7f97c2f47000 r-xp 00000000 08:02 2195686 /usr/lib/libxcb.so.1.0.0
7f97c2f47000-7f97c3146000 ---p 0001b000 08:02 2195686 /usr/lib/libxcb.so.1.0.0
7f97c3146000-7f97c3147000 r--p 0001a000 08:02 2195686 /usr/lib/libxcb.so.1.0.0
7f97c3147000-7f97c3148000 rw-p 0001b000 08:02 2195686 /usr/lib/libxcb.so.1.0.0
7f97c3148000-7f97c314f000 r-xp 00000000 08:02 2198551 /usr/lib/libxcb-render.so.0.0.0
7f97c314f000-7f97c334f000 ---p 00007000 08:02 2198551 /usr/lib/libxcb-render.so.0.0.0
7f97c334f000-7f97c3350000 r--p 00007000 08:02 2198551 /usr/lib/libxcb-render.so.0.0.0
7f97c3350000-7f97c3351000 rw-p 00008000 08:02 2198551 /usr/lib/libxcb-render.so.0.0.0
7f97c3351000-7f97c3354000 r-xp 00000000 08:02 2208929 /usr/lib/libxcb-render-util.so.0.0.0
7f97c3354000-7f97c3553000 ---p 00003000 08:02 2208929 /usr/lib/libxcb-render-util.so.0.0.0
7f97c3553000-7f97c3554000 r--p 00002000 08:02 2208929 /usr/lib/libxcb-render-util.so.0.0.0
7f97c3554000-7f97c3555000 rw-p 00003000 08:02 2208929 /usr/lib/libxcb-render-util.so.0.0.0
7f97c3555000-7f97c357a000 r-xp 00000000 08:02 2197708 /usrAborted (core dumped)

[Rudolf Vavruch (rvavruch)]

Running Amsynth with -d:

amsynth -d
amSynth 1.2.0
Copyright 2001-2006 Nick Dowell and others.
amSynth comes with ABSOLUTELY NO WARRANTY
This is free software, and you are welcome to redistribute it
under certain conditions; see the file COPYING for details

*** CONFIGURATION:
MIDI:- driver:auto channel:2
AUDIO:- driver:auto sample rate:48000

*** INITIALISING AUDIO ENGINE...
loaded & initialised libjack.so :)
*** DONE :)

*** INITIALISING MIDI ENGINE...
<MidiInterface> Trying to open ALSA midi device...
<MidiInterface> opened ALSA midi device
*** DONE :)

/usr/bin/vkeybd
*** buffer overflow detected ***: amsynth terminated
======= Backtrace: =========
/lib/tls/i686/cmov/libc.so.6(__fortify_fail+0x48)[0xb72ed558]
/lib/tls/i686/cmov/libc.so.6[0xb72eb680]
/lib/tls/i686/cmov/libc.so.6[0xb72ead68]
/lib/tls/i686/cmov/libc.so.6(_IO_default_xsputn+0xc8)[0xb7260a18]
/lib/tls/i686/cmov/libc.so.6(_IO_vfprintf+0x133)[0xb7232ac3]
/lib/tls/i686/cmov/libc.so.6(__vsprintf_chk+0xa7)[0xb72eae17]
/lib/tls/i686/cmov/libc.so.6(__sprintf_chk+0x2d)[0xb72ead5d]
amsynth[0x806eb53]
======= Memory map: ========
08048000-08095000 r-xp 00000000 08:22 573219 /usr/bin/amsynth
08095000-080ba000 rw-p 0004c000 08:22 573219 /usr/bin/amsynth
080ba000-080bb000 rw-p 080ba000 00:00 0
088ae000-08a51000 rw-p 088ae000 00:00 0 [heap]
b5997000-b59bc000 rw-p b5997000 00:00 0
b59bc000-b59db000 r-xp 00000000 08:22 597164 /usr/lib/gtk-2.0/2.10.0/engines/libmurrine.so
b59db000-b59dc000 r--p 0001e000 08:22 597164 /usr/lib/gtk-2.0/2.10.0/engines/libmurrine.so
b59dc000-b59dd000 rw-p 0001f000 08:22 597164 /usr/lib/gtk-2.0/2.10.0/engines/libmurrine.so
b59dd000-b59e7000 r-xp 00000000 08:22 499146 /lib/tls/i686/cmov/libnss_files-2.8.90.so
b59e7000-b59e8000 r--p 00009000 08:22 499146 /lib/tls/i686/cmov/libnss_files-2.8.90.so
b59e8000-b59e9000 rw-p 0000a000 08:22 499146 /lib/tls/i686/cmov/libnss_files-2.8.90.so
b59e9000-b59fe000 r-xp 00000000 08:22 499140 /lib/tls/i686/cmov/libnsl-2.8.90.so
b59fe000-b59ff000 r--p 00014000 08:22 499140 /lib/tls/i686/cmov/libnsl-2.8.90.so
b59ff000-b5a00000 rw-p 00015000 08:22 499140 /lib/tls/i686/cmov/libnsl-2.8.90.so
b5a00000-b5a02000 rw-p b5a00000 00:00 0
b5a02000-b5a09000 r-xp 00000000 08:22 499142 /lib/tls/i686/cmov/libnss_compat-2.8.90.so
b5a09000-b5a0a000 r--p 00006000 08:22 499142 /lib/tls/i686/cmov/libnss_compat-2.8.90.so
b5a0a000-b5a0b000 rw-p 00007000 08:22 499142 /lib/tls/i686/cmov/libnss_compat-2.8.90.so
b5a1e000-b5a5d000 r--p 00000000 08:22 597717 /usr/lib/locale/en_ZA.utf8/LC_CTYPE
b5a5d000-b5b3e000 r--p 00000000 08:22 597716 /usr/lib/locale/en_ZA.utf8/LC_COLLATE
b5b3e000-b5b3f000 ---p b5b3e000 00:00 0
b5b3f000-b633f000 rw-p b5b3f000 00:00 0
b633f000-b6340000 ---p b633f000 00:00 0
b6340000-b6b40000 rw-p b6340000 00:00 0
b6b40000-b6c40000 rw-s 00000000 00:09 1277970 /SYSV00000000 (deleted)
b6c40000-b6d40000 rw-s 00000000 00:09 1245201 /SYSV00000000 (deleted)
b6d40000-b6d79000 rw-s 00000000 00:09 1212432 /SYSV00000000 (deleted)
b6d79000-b6d87000 r-xp 00000000 08:22 573044 /usr/lib/libjack.so.0.0.28
b6d87000-b6d88000 r--p 0000e000 08:22 573044 /usr/lib/libjac...

[Rudolf Vavruch (rvavruch)]

I installed the Hardy version of Amsynth and it seems to be running fine.

[DigitalPhoenix (thedigitalphoenix)]

I am having the same problem in Intrepid Ibex (8.10) amd64 version.Can some one fix this.Here's what i get wjen i run amsynth from a terminal:

------------------------------------
amSynth 1.2.0
Copyright 2001-2006 Nick Dowell and others.
amSynth comes with ABSOLUTELY NO WARRANTY
This is free software, and you are welcome to redistribute it
under certain conditions; see the file COPYING for details
loaded & initialised libjack.so :)
/usr/bin/vkeybd
*** buffer overflow detected ***: amsynth terminated
======= Backtrace: =========
/lib/libc.so.6(__fortify_fail+0x37)[0x7f20a6f80887]
/lib/libc.so.6[0x7f20a6f7e750]
/lib/libc.so.6[0x7f20a6f7dae9]
/lib/libc.so.6(_IO_default_xsputn+0x96)[0x7f20a6ef9116]
/lib/libc.so.6(_IO_vfprintf+0x176)[0x7f20a6ec87f6]
/lib/libc.so.6(__vsprintf_chk+0x9d)[0x7f20a6f7db8d]
/lib/libc.so.6(__sprintf_chk+0x80)[0x7f20a6f7dad0]
amsynth[0x428f6e]
amsynth[0x40fe21]
/lib/libc.so.6(__libc_start_main+0xe6)[0x7f20a6e9f466]
amsynth[0x40f209]
======= Memory map: ========
00400000-00459000 r-xp 00000000 08:05 1188232 /usr/bin/amsynth
00658000-0067e000 rw-p 00058000 08:05 1188232 /usr/bin/amsynth
0067e000-0067f000 rw-p 0067e000 00:00 0
025cc000-028b5000 rw-p 025cc000 00:00 0 [heap]
40ac6000-40ac7000 ---p 40ac6000 00:00 0
40ac7000-412c7000 rw-p 40ac7000 00:00 0
412c7000-412c8000 ---p 412c7000 00:00 0
412c8000-41ac8000 rw-p 412c8000 00:00 0 ...

[DigitalPhoenix (thedigitalphoenix)]

Hey! I removed the amsynth 1.2.0-3.2 package which comes with intrepid and installed the hardy package (1.2.0-2).guess what? It works perfectly, in 8.10 amd64 !.

[Bruno Santos (bsantos)]

Still crashes in Jaunty :-(

[Peter Nelson (peter+launchpad)]

amSynth 1.2.1 was released on 2009-04-08, over 2 years since the previous release, with the following change log:

    * fixed compilation errors on Linux/GCC-4.3.2
    * fixed a buffer overflow crash, which prevented running on recent ubuntu versions

I guess it was a bit late for Jaunty. Could this be squeezed in as an update?

[huiii (a00ps)]

I had exactly the same problem after installing amsynth with synaptic on ubuntu jaunty 64bit.
never had problems on previous ubuntu versions...
so i uninstalled it, went to amsynth website and downloaded source, compiled and now it works perfect.

[Tim Peck (mit1185-deactivatedaccount)]

I have exactly the same problem in karmic. The program immediately crashes.

[nickleus (nick-humphrey)]

same problem here in karmic as well on amd64. going to try and compile it myself

[nickleus (nick-humphrey)]

i compiled amsynth from sources at sourceforge and it starts at least, now i'm working on configuring alsa and midi... (help!)

[Alexander Torstling (atorstling)]

I also get the same crash in karmic

[salvoinzk (salvoinz)]

yes me too!!!
the same crash in kubuntu 9.10 karmic.

here is the output:

salvo@piera-laptop:~$ amsynth
amSynth 1.2.0
Copyright 2001-2006 Nick Dowell and others.
amSynth comes with ABSOLUTELY NO WARRANTY
This is free software, and you are welcome to redistribute it
under certain conditions; see the file COPYING for details
cannot load JACK library
ALSA lib pcm_dmix.c:1008:(snd_pcm_dmix_open) unable to open slave
ALSA: cannot open audio device default
ALSA lib pcm_dmix.c:1008:(snd_pcm_dmix_open) unable to open slave
ALSA: cannot open audio device default
<OSSAudioDriver> error: could not open dsp device /dev/dsp
error: could not find "auto" audio driver
/usr/bin/vkeybd
*** buffer overflow detected ***: amsynth terminated
======= Backtrace: =========
/lib/libc.so.6(__fortify_fail+0x37)[0x7fdf50ea7647]
/lib/libc.so.6[0x7fdf50ea65f0]
/lib/libc.so.6[0x7fdf50ea5a59]
/lib/libc.so.6(_IO_default_xsputn+0x98)[0x7fdf50e24448]
/lib/libc.so.6(_IO_vfprintf+0x146)[0x7fdf50df4ee6]
/lib/libc.so.6(__vsprintf_chk+0x99)[0x7fdf50ea5af9]
/lib/libc.so.6(__sprintf_chk+0x7f)[0x7fdf50ea5a3f]
amsynth[0x429cc9]
amsynth[0x40fe28]
/lib/libc.so.6(__libc_start_main+0xfd)[0x7fdf50dceabd]
amsynth[0x40f209]
======= Memory map: ========
00400000-00458000 r-xp 00000000 08:06 12284 /usr/bin/amsynth
00657000-00658000 r--p 00057000 08:06 12284 /usr/bin/amsynth
00658000-0067d000 rw-p 00058000 08:06 12284 /usr/bin/amsynth
0067d000-0067e000 rw-p 00000000 00:00 0
01a61000-01daa000 rw-p 00000000 00:00 0 [heap]
7fdf4b46c000-7fdf4b491000 rw-p 00000000 00:00 0
7fdf4b491000-7fdf4b495000 r-xp 00000000 08:06 526298 /usr/lib/gtk-2.0/2.10.0/loaders/libpixbufloader-png.so
7fdf4b495000-7fdf4b695000 ---p 00004000 08:06 526298 /usr/lib/gtk-2.0/2.10.0/loaders/libpixbufloader-png.so
7fdf4b695000-7fdf4b696000 r--p 00004000 08:06 526298 /usr/lib/gtk-2.0/2.10.0/loaders/libpixbufloader-png.so
7fdf4b696000-7fdf4b697000 rw-p 00005000 08:06 526298 /usr/lib/gtk-2.0/2.10.0/loaders/libpixbufloader-png.so
7fdf4b697000-7fdf4b72f000 r--p 0...

[Alessio Treglia (quadrispro)]

Can't reproduce on Lucid.

[Thomas Ward (teward)]

Hello. The Karmic release of Ubuntu has gone End of Life, and is no longer supported. Therefore, I am marking this bug "Won't Fix" for the Karmic release.