buffer overflow detected: dvgrab terminated

[Carl Karsten]

Binary package hint: dvgrab

juser@dhcp186:~$ dvgrab -showstatus -s 0 foo
Found AV/C device with GUID 0x008088030a613f59
Warning: Cannot set RR-scheduler
Warning: Cannot disable swapping
Capture Started
*** buffer overflow detected ***: dvgrab terminated
======= Backtrace: =========
/lib/tls/i686/cmov/libc.so.6(__fortify_fail+0x48)[0xb7d2d558]
/lib/tls/i686/cmov/libc.so.6[0xb7d2b680]
/lib/tls/i686/cmov/libc.so.6[0xb7d2ad68]
/lib/tls/i686/cmov/libc.so.6(_IO_default_xsputn+0xc8)[0xb7ca0a18]
/lib/tls/i686/cmov/libc.so.6(_IO_vfprintf+0xf4a)[0xb7c738da]
/lib/tls/i686/cmov/libc.so.6(__vsprintf_chk+0xa7)[0xb7d2ae17]
/lib/tls/i686/cmov/libc.so.6(__sprintf_chk+0x2d)[0xb7d2ad5d]
dvgrab[0x80551da]
dvgrab[0x8056d0d]
dvgrab[0x8056fe0]
dvgrab[0x80572d1]
/lib/tls/i686/cmov/libpthread.so.0[0xb7efe50f]
/lib/tls/i686/cmov/libc.so.6(clone+0x5e)[0xb7d147ee]
======= Memory map: ========
08048000-08084000 r-xp 00000000 08:01 1038363 /usr/bin/dvgrab
08084000-08086000 rw-p 0003b000 08:01 1038363 /usr/bin/dvgrab
08086000-09887000 rw-p 08086000 00:00 0
09bf3000-09f28000 rw-p 09bf3000 00:00 0
09f28000-09f2c000 rw-p 09f28000 00:00 0
09f2c000-09f3b000 rw-p 09f2c000 00:00 0
b004b000-b004c000 ---p b004b000 00:00 0
b004c000-b084c000 rw-p b004c000 00:00 0
b084c000-b08c9000 rw-s 00000000 00:0e 12308 /dev/raw1394
b08c9000-b08ed000 rw-p b08c9000 00:00 0
b08ed000-b08ee000 ---p b08ed000 00:00 0
b08ee000-b7a96000 rw-p b08ee000 00:00 0
b7a96000-b7a9a000 r-xp 00000000 08:01 346985 /usr/lib/libXdmcp.so.6.0.0
b7a9a000-b7a9b000 rw-p 00003000 08:01 346985 /usr/lib/libXdmcp.so.6.0.0
b7a9b000-b7a9c000 rw-p b7a9b000 00:00 0
b7a9c000-b7a9e000 r-xp 00000000 08:01 346983 /usr/lib/libXau.so.6.0.0
b7a9e000-b7a9f000 rw-p 00001000 08:01 346983 /usr/lib/libXau.so.6.0.0
b7a9f000-b7ab6000 r-xp 00000000 08:01 346987 /usr/lib/libxcb.so.1.0.0
b7ab6000-b7ab7000 r--p 00016000 08:01 346987 /usr/lib/libxcb.so.1.0.0
b7ab7000-b7ab8000 rw-p 00017000 08:01 346987 /usr/lib/libxcb.so.1.0.0
b7ab8000-b7ab9000 r-xp 00000000 08:01 346989 /usr/lib/libxcb-xlib.so.0.0.0
b7ab9000-b7aba000 r--p 00000000 08:01 346989 /usr/lib/libxcb-xlib.so.0.0.0
b7aba000-b7abb000 rw-p 00001000 08:01 346989 /usr/lib/libxcb-xlib.so.0.0.0
b7abb000-b7ac2000 r-xp 00000000 08:01 347894 /usr/lib/libdrm.so.2.3.1
b7ac2000-b7ac3000 r--p 00006000 08:01 347894 /usr/lib/libdrm.so.2.3.1
b7ac3000-b7ac4000 rw-p 00007000 08:01 347894 /usr/lib/libdrm.so.2.3.1
b7ac4000-b7ac8000 r-xp 00000000 08:01 347896 /usr/lib/libXfixes.so.3.1.0
b7ac8000-b7ac9000 rw-p 00003000 08:01 347896 /usr/lib/libXfixes.so.3.1.0
b7ac9000-b7aca000 rw-p b7ac9000 00:00 0
b7aca000-b7acc000 r-xp 00000000 08:01 347898 /usr/lib/libXdamage.so.1.1.0
b7acc000-b7acd000 rw-p 00001000 08:01 347898 /usr/lib/libXdamage.so.1.1.0
b7acd000-b7ad1000 r-xp 00000000 08:01 347900 /usr/lib/libXxf86vm.so.1.0.0
b7ad1000-b7ad2000 r--p 00003000 08:01 347900 /usr/lib/libXxf86vm.so.1.0.0
b7ad2000-b7ad3000 rw-p 00004000 08:01 347900 /usr/lib/libXxf86vm.so.1.0.0
b7ad3000-b7ae0000 r-xp 00000000 08:01 346993 /usr/lib/libXext.so.6.4.0
b7ae0000-b7ae2000 rw-p 0000c000 08:01 346993 /usr/lib/libXext.so.6.4.0
b7ae2000-b7bcd000 r-xp 00000000 08:01 346991 /usr/lib/libX11.so.6.2.0
b7bcd000-b7bce000 r--p 000ea000 08:01 346991 /usr/lib/libX11.so.6.2.0
b7bce000-b7bd0000 rw-p 000eb000 08:01 346991 /usr/lib/libX11.so.6.2.0
b7bd0000-b7bd1000 rw-p b7bd0000 00:00 0
b7bd1000-b7c27000 r-xp 00000000 08:01 347902 /usr/lib/libGL.so.1.2
b7c27000-b7c2c000 r--p 00055000 08:01 347902 /usr/lib/libGL.so.1.2
b7c2c000-b7c31000 rwxp 0005a000 08:01 347902 /usr/lib/libGL.so.1.2
b7c31000-b7c32000 rwxp b7c31000 00:00 0
b7c32000-b7c33000 rw-p b7c32000 00:00 0
b7c33000-b7d8b000 r-xp 00000000 08:01 793219 /lib/tls/i686/cmov/libc-2.8.90.so
b7d8b000-b7d8d000 r--p 00158000 08:01 793219 /lib/tls/i686/cmov/libc-2.8.90.so
b7d8d000-b7d8e000 rw-p 0015a000 08:01 793219 /lib/tls/i686/cmov/libc-2.8.90.so
b7d8e000-b7d91000 rw-p b7d8e000 00:00 0
b7d91000-b7d9e000 r-xp 00000000 08:01 793136 /lib/libgcc_s.so.1
b7d9e000-b7d9f000 r--p 0000c000 08:01 793136 /lib/libgcc_s.so.1
b7d9f000-b7da0000 rw-p 0000d000 08:01 793136 /Aborted
juser@dhcp186:~$

juser@dhcp186:~$ gdb
GNU gdb 6.8-debian
Copyright (C) 2008 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "i486-linux-gnu".
(gdb) file dvgrab
Reading symbols from /usr/bin/dvgrab...done.
(gdb) run -showstatus -s 0 foo
Starting program: /usr/bin/dvgrab -showstatus -s 0 foo
[Thread debugging using libthread_db enabled]
Found AV/C device with GUID 0x008088030a613f59
[New Thread 0xb7a076c0 (LWP 4599)]
[New Thread 0xb1060b90 (LWP 4602)]
[New Thread 0xb07beb90 (LWP 4603)]
Warning: Cannot set RR-scheduler
Warning: Cannot disable swapping
Capture Started
*** buffer overflow detected ***: /usr/bin/dvgrab terminated
======= Backtrace: =========
/lib/tls/i686/cmov/libc.so.6(__fortify_fail+0x48)[0xb7c3e558]
/lib/tls/i686/cmov/libc.so.6[0xb7c3c680]
/lib/tls/i686/cmov/libc.so.6[0xb7c3bd68]
/lib/tls/i686/cmov/libc.so.6(_IO_default_xsputn+0xc8)[0xb7bb1a18]
/lib/tls/i686/cmov/libc.so.6(_IO_vfprintf+0xf4a)[0xb7b848da]
/lib/tls/i686/cmov/libc.so.6(__vsprintf_chk+0xa7)[0xb7c3be17]
/lib/tls/i686/cmov/libc.so.6(__sprintf_chk+0x2d)[0xb7c3bd5d]
/usr/bin/dvgrab[0x80551da]
/usr/bin/dvgrab[0x8056d0d]
/usr/bin/dvgrab[0x8056fe0]
/usr/bin/dvgrab[0x80572d1]
/lib/tls/i686/cmov/libpthread.so.0[0xb7e1050f]
/lib/tls/i686/cmov/libc.so.6(clone+0x5e)[0xb7c257ee]
======= Memory map: ========
08048000-08084000 r-xp 00000000 08:01 1038364 /usr/bin/dvgrab
08084000-08085000 r--p 0003b000 08:01 1038364 /usr/bin/dvgrab
08085000-08086000 rw-p 0003c000 08:01 1038364 /usr/bin/dvgrab
08086000-09887000 rw-p 08086000 00:00 0
0b711000-0ba46000 rw-p 0b711000 00:00 0
0ba46000-0ba4a000 rw-p 0ba46000 00:00 0
0ba4a000-0ba59000 rw-p 0ba4a000 00:00 0
affbe000-affbf000 ---p affbe000 00:00 0
affbf000-b07bf000 rw-p affbf000 00:00 0
b07bf000-b083c000 rw-s 00000000 00:0e 12308 /dev/raw1394
b083c000-b0860000 rw-p b083c000 00:00 0
b0860000-b0861000 ---p b0860000 00:00 0
b0861000-b7a09000 rw-p b0861000 00:00 0
b7a09000-b7a0d000 r-xp 00000000 08:01 346985 /usr/lib/libXdmcp.so.6.0.0
b7a0d000-b7a0e000 rw-p 00003000 08:01 346985 /usr/lib/libXdmcp.so.6.0.0
b7a0e000-b7a0f000 rw-p b7a0e000 00:00 0
b7a0f000-b7a11000 r-xp 00000000 08:01 346983 /usr/lib/libXau.so.6.0.0
b7a11000-b7a12000 rw-p 00001000 08:01 346983 /usr/lib/libXau.so.6.0.0
b7a12000-b7a29000 r-xp 00000000 08:01 346987 /usr/lib/libxcb.so.1.0.0
b7a29000-b7a2a000 r--p 00016000 08:01 346987 /usr/lib/libxcb.so.1.0.0
b7a2a000-b7a2b000 rw-p 00017000 08:01 346987 /usr/lib/libxcb.so.1.0.0
b7a2b000-b7a2c000 r-xp 00000000 08:01 346989 /usr/lib/libxcb-xlib.so.0.0.0
b7a2c000-b7a2d000 r--p 00000000 08:01 346989 /usr/lib/libxcb-xlib.so.0.0.0
b7a2d000-b7a2e000 rw-p 00001000 08:01 346989 /usr/lib/libxcb-xlib.so.0.0.0
b7a2e000-b7a35000 r-xp 00000000 08:01 347894 /usr/lib/libdrm.so.2.3.1
b7a35000-b7a36000 r--p 00006000 08:01 347894 /usr/lib/libdrm.so.2.3.1
b7a36000-b7a37000 rw-p 00007000 08:01 347894 /usr/lib/libdrm.so.2.3.1
b7a37000-b7a3b000 r-xp 00000000 08:01 347896 /usr/lib/libXfixes.so.3.1.0
b7a3b000-b7a3c000 rw-p 00003000 08:01 347896 /usr/lib/libXfixes.so.3.1.0
b7a3c000-b7a3d000 rw-p b7a3c000 00:00 0
b7a3d000-b7a3f000 r-xp 00000000 08:01 347898 /usr/lib/libXdamage.so.1.1.0
b7a3f000-b7a40000 rw-p 00001000 08:01 347898 /usr/lib/libXdamage.so.1.1.0
b7a40000-b7a44000 r-xp 00000000 08:01 347900 /usr/lib/libXxf86vm.so.1.0.0
b7a44000-b7a45000 r--p 00003000 08:01 347900 /usr/lib/libXxf86vm.so.1.0.0
b7a45000-b7a46000 rw-p 00004000 08:01 347900 /usr/lib/libXxf86vm.so.1.0.0
b7a46000-b7a53000 r-xp 00000000 08:01 346993 /usr/lib/libXext.so.6.4.0
b7a53000-b7a55000 rw-p 0000c000 08:01 346993 /usr/lib/libXext.so.6.4.0
b7a55000-b7b40000 r-xp 00000000 08:01 346991 /usr/lib/libX11.so.6.2.0
b7b40000-b7b41000 r--p 000ea000 08:01 346991 /usr/lib/libX11.so.6.2.0
b7b41000-b7b43000 rw-p 000eb000 08:01 346991 /usr/lib/libX11.so.6.2.0
b7b43000-b7b44000 rw-p b7b43000 00:00 0
b7b44000-b7c9c000 r-xp 00000000 08:01 793219 /lib/tls/i686/cmov/libc-2.8.90.so
b7c9c000-b7c9e000 r--p 00158000 08:01 793219 /lib/tls/i686/cmov/libc-2.8.90.so
b7c9e000-b7c9f000 rw-p 0015a000 08:01 793219 /lib/tls/i686/cmov/libc-2.8.90.so
b7c9f000-b7ca3000 rw-p b7c9f000 00:00 0
b7ca3000-b7cb0000 r-xp 00000000 08:01 793136 /lib/libgcc_s.so.1
b7cb0000-b7cb1000 r--p 0000c000 08:01 793136 /lib/libgcc_s.so.1
b7cb1000-b7cb2000 rw-p 0000d000 08:01 793136 /lib/libgcc_s.so.1
b7cb2000-b7d95000 r-xp 00000000 08:01 344764 /usr/lib/libstdc++.so.6.0.10
b7d95000-b7d96000 ---p 000e3000 08:01 344764 /usr/lib/libstdc++.so.6.0.10
b7d96000-b7d9a000 r--p 000e3000 08:01 344764 /usr/lib/libstdc++.so.6.0
Program received signal SIGABRT, Aborted.
[Switching to Thread 0xb1060b90 (LWP 4602)]
0xb7f64430 in __kernel_vsyscall ()
(gdb) bt full
#0 0xb7f64430 in __kernel_vsyscall ()
No symbol table info available.
#1 0xb7b6f880 in raise () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#2 0xb7b71248 in abort () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#3 0xb7bad10d in ?? () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#4 0xb7c3e558 in __fortify_fail () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#5 0xb7c3c680 in __chk_fail () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#6 0xb7c3bd68 in ?? () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#7 0xb7bb1a18 in _IO_default_xsputn () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#8 0xb7b848da in vfprintf () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#9 0xb7c3be17 in __vsprintf_chk () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#10 0xb7c3bd5d in __sprintf_chk () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
#11 0x080551da in DVgrab::sendCaptureStatus (this=0xbfa63968,
    name=0xba491e4 "foo003.dv", size=0.114440918, frames=1, tc=0x6,
    rd=0xb7c9dff4, newline=216) at /usr/include/bits/stdio2.h:35
 tc_str = "195334428:05:-1220521976.191959\v"
 rd_str = "�\201\000\000o\221Է�\003\000\000�\003", '\0' <repeats 14 times>, "��\001"
#12 0x08056d0d in DVgrab::writeFrame (this=0xbfa63968) at dvgrab.cc:835
 framesWritten = 0
 timeCode = (TimeCode *) 0xb1060270
 rd = {tm_sec = 6, tm_min = 6, tm_hour = 2, tm_mday = 22, tm_mon = 9,
  tm_year = 108, tm_wday = 3, tm_yday = 295, tm_isdst = 1, tm_gmtoff = -18000,
  tm_zone = 0xb7131c0 "CDT"}
 lastrd = (tm *) 0x0
 fileName = {static npos = 4294967295,
  _M_dataplus = {<std::allocator<char>> = {<__gnu_cxx::new_allocator<char>> = {<No data fields>}, <No data fields>}, _M_p = 0x80856ec ""}}
 tc = {hour = 195334428, min = 5, sec = -1220521976, frame = 191959692}
 lasttc = (TimeCode *) 0x0
#13 0x08056fe0 in DVgrab::captureThreadRun (this=0xbfa63968) at dvgrab.cc:963
 dvframe = (class DVFrame *) 0xb7405008
 timeCode = {hour = 191959692, min = 191960232, sec = -1209925644,
  frame = -1209925644}
---Type <return> to continue, or q <return> to quit---
 dropped = 0
#14 0x080572d1 in DVgrab::captureThread (arg=0xbfa63968) at dvgrab.cc:725
No locals.
#15 0xb7e1050f in start_thread () from /lib/tls/i686/cmov/libpthread.so.0
No symbol table info available.
#16 0xb7c257ee in clone () from /lib/tls/i686/cmov/libc.so.6
No symbol table info available.
(gdb)

[Dimitrios Symeonidis (azimout)]

 Thank you for taking the time to report this bug and helping to make Ubuntu better. You reported this bug a while ago and there hasn't been any activity in it recently. We were wondering if this is still an issue for you. Can you try with the latest Ubuntu release? Thanks in advance.

[Launchpad Janitor (janitor)]

[Expired for dvgrab (Ubuntu) because there has been no activity for 60 days.]