Glusterfs Client 3.0.5 crashes with buffer overflow

[Lee Maguire]

Binary package hint: glusterfs-client

After upgrading glusterfs-client from maverick (3.0.4) to natty (3.0.5) all glusterfs volumes failed to mount as the clients immediately dump core.

Manually reverting to 3.0.4 allows the volumes to be mounted.

root@test16:/tmp# cat test.vol

volume default
    type protocol/client
    option transport-type tcp
    option remote-host 192.168.2.15
    option transport.address-family inet
    option transport.socket.nodelay on
    option remote-port 6996
    option remote-subvolume brick-1
end-volume

root@test16:/tmp# apt-get install libglusterfs0=3.0.4-1 glusterfs-client=3.0.4-1
[...]
root@test16:/tmp# glusterfs -f /tmp/test.vol /mnt
root@test16:/tmp# touch /mnt/foo
root@test16:/tmp# umount /mnt
root@test16:/tmp# apt-get install libglusterfs0=3.0.5-1 glusterfs-client=3.0.5-1
[...]
root@test16:/tmp# glusterfs -f /tmp/test.vol /mnt
root@test16:/tmp# touch /mnt/foo
touch: cannot touch `/mnt/foo': Transport endpoint is not connected
root@test16:/tmp# umount /mnt

(Note: the remote glusterfs server is running 3.0.5)

Ubuntu 11.04

[Tais P. Hansen (taisph)]

This seems to be caused by compiling glusterfs with -D_FORTIFY_SOURCE=2, which also seems to be the default in gcc. I rebuilt gluster-client with -D_FORTIFY_SOURCE=1 and that "fixes" the problem.

Details: http://gcc.gnu.org/ml/gcc-patches/2004-09/msg02055.html

Quick workaround:

mkdir glusterfs
cd glusterfs
apt-get source glusterfs-client
sudo apt-get build-dep glusterfs-client
cd glusterfs-3.0.5
DEB_CFLAGS_APPEND="-D_FORTIFY_SOURCE=1" debuild -us -uc
cd ..
sudo dpkg --install glusterfs-client_3.0.5-1_*.deb
sudo dpkg --install libglusterfs0_3.0.5-1_*.deb

[idistech (gary-idistech)]

I had a number of problems with Gluster 3.0.5 on Ubuntu 11.04
- Clients wouldnt connect
- Server(s) wouldnt replicate.

The above fix and new packages once deployed to clients and servers started the service working perfectly..

Many thanks...

[gdahlman (gdahlman)]

It would be nice if we could get an updated package in the repos for this.

[Marc Deslauriers (mdeslaur)]

This only affects Natty, as it got fixed in 3.1.x.

[Rolf Leggewie (r0lf)]

natty has seen the end of its life and is no longer receiving any updates. Marking the natty task for this ticket as "Won't Fix".