rpmdeps with no input segfaults at rpmfc.c:1257

[Jeff Johnson]

tracker

[Jens (jens-redhat-bugs)]

Description of problem:
rpmdeps segfaults if it is run with empty stdin.

Version-Release number of selected component (if applicable):
rpm-4.8.1-2.fc13

How reproducible:
every time

Steps to Reproduce:
$ echo -n | /usr/lib/rpm/rpmdeps

Actual results:
Segmentation fault (core dumped)

Expected results:
no segfault

Additional info:
Probably also happens in F14 - haven't tested yet.

[Jens (jens-redhat-bugs)]

[New Thread 23188]
Core was generated by `/usr/lib/rpm/rpmdeps --provides'.
Program terminated with signal 11, Segmentation fault.
#0 0x0000003a702192cc in rpmfcApply (fc=0x2243740) at rpmfc.c:1257
1257 rpmfc.c: No such file or directory.
 in rpmfc.c

Thread 1 (Thread 23188):
#0 0x0000003a702192cc in rpmfcApply (fc=0x2243740) at rpmfc.c:1257
        fcat = <value optimized out>
        s = <value optimized out>
        se = <value optimized out>
        ds = <value optimized out>
        N = <value optimized out>
        EVR = <value optimized out>
        deptype = <value optimized out>
        nddict = <value optimized out>
        previx = <value optimized out>
        dix = <value optimized out>
        ix = <value optimized out>
        i = <value optimized out>
        skipping = 0
#1 0x0000000000401122 in main (argc=<value optimized out>,
    argv=<value optimized out>) at tools/rpmdeps.c:89
        optCon = 0x21fb130
        av = 0x0
        fc = 0x2243740
        ac = <value optimized out>
        ec = 1
        buf = "\000\000\026\301APx\000\300KK\360\377\177\000\000\060LK\360\377\177\000\000\005\000\000\000\000\000\000\000\300.K\360\377\177\000\000\006\062\340\"=\000\000\000\000\000\323\277\006\177\000\000]\302 (<", '\000' <repeats 27 times>"\246, \340 (<\000\000\000\270\377A(<\000\000\000\350KK\360\377\177\000\000\360KK\360\377\177\000\000\377KK\360\377\177\000\000 \302 (<\000\000\000\300KK\360\377\177\000\000\000\000\000\000\000\000\000\000x6@\"=\000\000\000\060LK\360\377\177\000\000D\312 (<\000\000\000\000\360\322\277\006\177\000\000\310$\323\277\006\177\000\000\000\000\000\000\000\000\000\000\006\062\340\"=\000\000\000\000\000\323\277\006\177\000\000\000\000 [\226\340\377\377\000\000\026\301APx", '\000' <repeats 49 times>"\300, KK\360\377\177\000\000\060LK\360\377\177\000\000\000\000\000\000\000\000\000\000\320/K\360\377\177\000\000"...
From To Syms Read Shared Object Library
0x0000003a6fe14b50 0x0000003a6fe512e8 Yes /usr/lib64/librpm.so.1
0x0000003a6fa0b720 0x0000003a6fa226d8 Yes /usr/lib64/librpmio.so.1
0x0000003a702089e0 0x0000003a7021d548 Yes /usr/lib64/librpmbuild.so.1
0x00000037f2605610 0x00000037f2615708 Yes /lib64/libselinux.so.1
0x0000003c2ba01330 0x0000003c2ba02c48 Yes /lib64/libcap.so.2
0x00000033c7401d30 0x00000033c7405c08 Yes /lib64/libacl.so.1
0x0000003c2b6238c0 0x0000003c2b74b588 Yes /lib64/libdb-4.8.so
0x0000003d23218430 0x0000003d232fc708 Yes /usr/lib64/libnss3.so
0x0000003c38201630 0x0000003c3820dcc8 Yes /lib64/libbz2.so.1
0x0000003c29601ef0 0x0000003c2960d228 Yes /lib64/libz.so.1
0x0000003c34a025d0 0x0000003c34a169a8 Yes /usr/lib64/liblzma.so.0
0x0000003a72606d80 0x0000003a72621c28 Yes /usr/lib64/liblua-5.1.so
0x0000003035c03ea0 0x0000003035c43fa8 Yes /lib64/libm.so.6
0x0000003c2be029d0 0x0000003c2be0f758 Yes (*) /usr/lib64/libelf.so.1
0x0000003a64803dc0 0x0000003a648153e8 Yes /usr/lib64/libmagic.so.1
0x0000003c3b601b10 0x0000003c3b606ee8 Yes /lib64/libpopt.so.0
0x0000003c29a02140 0x0000003c29a055a8 Yes /lib6...

[Jindrich (jindrich-redhat-bugs)]

Fixed upstream for now. The crash was caused by dereferencing NULL pointer.

[Jeff Johnson (n3npq)]

Fixed here:
    http://bazaar.launchpad.net/~rpm5/rpm/rpm.org/revision/10323

[Jeff Johnson (n3npq)]

And not a problem for @rpm5.org:

    [root@rhel6 rpm]# echo -n | /usr/lib/rpm/bin/rpmdeps
    [root@rhel6 rpm]# rpm --version
    rpm (RPM) 5.3.4