Ubuntu lucid amd64: isomaster *** buffer overflow detected ***: isomaster terminated

[Lorenzo Zoffoli]

Binary package hint: isomaster

isomaster crashes with buffer overflow error.

Here full dump:

$isomaster
*** buffer overflow detected ***: isomaster terminated
======= Backtrace: =========
/lib/libc.so.6(__fortify_fail+0x37)[0x7f7a3b942e67]
/lib/libc.so.6[0x7f7a3b941e10]
/lib/libc.so.6[0x7f7a3b94150b]
/lib/libc.so.6(__snprintf_chk+0x7a)[0x7f7a3b9413da]
isomaster[0x40f08b]
isomaster[0x4062ce]
/lib/libc.so.6(__libc_start_main+0xfd)[0x7f7a3b869add]
isomaster[0x406199]
======= Memory map: ========
00400000-00426000 r-xp 00000000 08:08 29034 /usr/bin/isomaster
00625000-00626000 r--p 00025000 08:08 29034 /usr/bin/isomaster
00626000-00627000 rw-p 00026000 08:08 29034 /usr/bin/isomaster
00627000-0065a000 rw-p 00000000 00:00 0
01d22000-01dc5000 rw-p 00000000 00:00 0 [heap]
7f7a35dac000-7f7a35dc2000 r-xp 00000000 08:08 4336 /lib/libgcc_s.so.1
7f7a35dc2000-7f7a35fc1000 ---p 00016000 08:08 4336 /lib/libgcc_s.so.1
7f7a35fc1000-7f7a35fc2000 r--p 00015000 08:08 4336 /lib/libgcc_s.so.1
7f7a35fc2000-7f7a35fc3000 rw-p 00016000 08:08 4336 /lib/libgcc_s.so.1
7f7a35fc3000-7f7a35fe6000 r-xp 00000000 08:08 168126 /usr/lib/gtk-2.0/2.10.0/engines/libmurrine.so
7f7a35fe6000-7f7a361e5000 ---p 00023000 08:08 168126 /usr/lib/gtk-2.0/2.10.0/engines/libmurrine.so
7f7a361e5000-7f7a361e6000 r--p 00022000 08:08 168126 /usr/lib/gtk-2.0/2.10.0/engines/libmurrine.so
7f7a361e6000-7f7a361e7000 rw-p 00023000 08:08 168126 /usr/lib/gtk-2.0/2.10.0/engines/libmurrine.so
7f7a361e7000-7f7a361ef000 r-xp 00000000 08:08 4849 /usr/lib/libltdl.so.7.2.1
7f7a361ef000-7f7a363ef000 ---p 00008000 08:08 4849 /usr/lib/libltdl.so.7.2.1
7f7a363ef000-7f7a363f0000 r--p 00008000 08:08 4849 /usr/lib/libltdl.so.7.2.1
7f7a363f0000-7f7a363f1000 rw-p 00009000 08:08 4849 /usr/lib/libltdl.so.7.2.1
7f7a363f1000-7f7a363fe000 r-xp 00000000 08:08 1710 /usr/lib/libtdb.so.1.1.5
7f7a363fe000-7f7a365fd000 ---p 0000d000 08:08 1710 /usr/lib/libtdb.so.1.1.5
7f7a365fd000-7f7a365fe000 r--p 0000c000 08:08 1710 /usr/lib/libtdb.so.1.1.5
7f7a365fe000-7f7a365ff000 rw-p 0000d000 08:08 1710 /usr/lib/libtdb.so.1.1.5
7f7a365ff000-7f7a36604000 r-xp 00000000 08:08 8696 /usr/lib/libogg.so.0.6.0
7f7a36604000-7f7a36803000 ---p 00005000 08:08 8696 /usr/lib/libogg.so.0.6.0
7f7a36803000-7f7a36804000 r--p 00004000 08:08 8696 /usr/lib/libogg.so.0.6.0
7f7a36804000-7f7a36805000 rw-p 00005000 08:08 8696 /usr/lib/libogg.so.0.6.0
7f7a36805000-7f7a36831000 r-xp 00000000 08:08 7797 /usr/lib/libvorbis.so.0.4.3
7f7a36831000-7f7a36a30000 ---p 0002c000 08:08 7797 /usr/lib/libvorbis.so.0.4.3
7f7a36a30000-7f7a36a31000 r--p 0002b000 08:08 7797 /usr/lib/libvorbis.so.0.4.3
7f7a36a31000-7f7a36a32000 rw-p 0002c000 08:08 7797 /usr/lib/libvorbis.so.0.4.3
7f7a36a32000-7f7a36a39000 r-xp 00000000 08:08 14549 /usr/lib/libvorbisfile.so.3.3.2
7f7a36a39000-7f7a36c38000 ---p 00007000 08:08 14549 /usr/lib/libvorbisfile.so.3.3.2
7f7a36c38000-7f7a36c39000 r--p 00006000 08:08 14549 /usr/lib/libvorbisfile.so.3.3.2
7f7a36c39000-7f7a36c3a000 rw-p 00007000 08:08 14549 /usr/lib/libvorbisfile.so.3.3.2
7f7a36c3a000-7f7a36c49000 r-xp 00000000 08:08 7964 /usr/lib/libcanberra.so.0.2.1
7f7a36c49000-7f7a36e48000 ---p 0000f000 08:08 7964 /usr/lib/libcanberra.so.0.2.1
7f7a36e48000-7f7a36e49000 r--p 0000e000 08:08 7964 /usr/lib/libcanberra.so.0.2.1
7f7a36e49000-7f7a36e4a000 rw-p 0000f000 08:08 7964 /usr/lib/libcanberra.so.0.2.1
7f7a36e4a000-7f7a36e4e000 r-xp 00000000 08:08 3990 /usr/lib/libgthread-2.0.so.0.2300.0
7f7a36e4e000-7f7a3704d000 ---p 00004000 08:08 3990 /usr/lib/libgthread-2.0.so.0.2300.0
7f7a3704d000-7f7a3704e000 r--p 00003000 08:08 3990 /usr/lib/libgthread-2.0.so.0.2300.0
7f7a3704e000-7f7a3704f000 rw-p 00004000 08:08 3990 /usr/lib/libgthread-2.0.so.0.2300.0
7f7a3704f000-7f7a37053000 r-xp 00000000 08:08 7971 /usr/lib/libcanberra-gtk.so.0.1.5
7f7a37053000-7f7a37252000 ---p 00004000 08:08 7971 /usr/lib/libcanberra-gtk.so.0.1.5
7f7a37252000-7f7a37253000 r--p 00003000 08:08 7971 /usr/lib/libcanberra-gtk.so.0.1.5
7f7a37253000-7f7a37254000 rw-p 00004000 08:08 7971 /usr/lib/libcanberra-gtk.so.0.1.5
7f7a37254000-7f7a37259000 r-xp 00000000 08:08 159715 /usr/lib/gtk-2.0/modules/libcanberra-gtk-module.so
7f7a37259000-7f7a37458000 ---p 00005000 08:08 159715 /usr/lib/gtk-2.0/modules/libcanberra-gtk-module.so
7f7a37458000-7f7a37459000 r--p 00004000 08:08 159715 /usr/lib/gtk-2.0/modules/libcanberra-gtk-module.so
7f7a37459000-7f7a3745a000 rw-p 00005000 08:08 159715 /usr/lib/gtk-2.0/modules/libcanberra-gtk-module.so
7f7a3745a000-7f7a37466000 r-xp 00000000 08:08 20076 /lib/libnss_files-2.10.2.so
7f7a37466000-7f7a37665000 ---p 0000c000 08:08 20076 /lib/libnss_files-2.10.2.so
7f7a37665000-7f7a37666000 r--p 0000b000 08:08 20076 /lib/libnss_files-2.10.2.so
7f7a37666000-7f7a37667000 rw-p 0000c000 08:08 20076 /lib/libnss_files-2.10.2.so
7f7a37667000-7f7a37671000 r-xp 00000000 08:08 20215 /lib/libnss_nis-2.10.2.so
7f7a37671000-7f7a37870000 ---p 0000a000 08:08 20215 /lib/libnss_nis-2.10.2.so
7f7a37870000-7f7a37871000 r--p 00009000 08:08 20215 /lib/libnss_nis-2.10.2.so
7f7a37871000-7f7a37872000 rw-p 0000a000 08:08 20215 /lib/libnss_nis-2.10.2.so
7f7a37872000-7f7a37888000 r-xp 00000000 08:08 20073 /lib/libnsl-2.10.2.so
7f7a37888000-7f7a37a88000 ---p 00016000 08:08 20073 /lib/libnsl-2.10.2.so
7f7a37a88000-7f7a37a89000 r--p 00016000 08:08 20073 /lib/libnsl-2.10.2.so
7f7a37a89000-7f7a37a8a000 rw-p 00017000 08:08 20073 /lib/libnsl-2.10.2.soAborted

[3vi1 (launchpad-net-eternaldusk)]

Just tested on my lucid AMD64 (Intel Q6600 Core 2 Quad) system and get the same results.

[ack (ack-acknowledge)]

Also i386.

[David Johnson (dj-david-web)]

I have asked upstream about this bug, but I suspect it is fixed in isomaster 1.3.7 (already in Debian, should reach Ubuntu shortly).

[Andrew Smith (asmith16)]

I can't say for sure this is the same bug I fixed (I don't have a Debian/Ubuntu handy) but it looks exactly like what I've seen on Fedora, and fixed just past 1.3.7

I figured it's just a strange way to compile ISO Master so didn't remake the release. If compiled without the fortify flags, everything works ok - that memory will never actually be accessed.

Patch is attached if you want to try it out.

[Curtis Lee Bolin (curtisleebolin)]

Andrew Smith's patch seems to work great. I have had no further problems with isomaster after applying his patch.

I tried to first rebuild the package without his patch for a control and still had the same problem.

I followed a guide online to rebuild an Ubuntu package. Below is what I did.

sudo apt-get install build-essential fakeroot dpkg-dev
mkdir build
cd build
apt-get source isomaster
sudo apt-get build-dep isomaster
dpkg-source -x isomaster_1.3.7-1.dsc
cd isomaster-1.3.7/
wget http://launchpadlibrarian.net/38389683/isomaster-fortify.patch
patch settings.c < isomaster-fortify.patch
dpkg-buildpackage -rfakeroot -b
cd ../
sudo dpkg -i isomaster_1.3.7-1_amd64.deb

[David Johnson (dj-david-web)]

Many thanks for testing the fix and reporting back.

I'm discussing with Andrew (upstream) whether he'll do a new isomaster release including the fix or whether I'll do a new Debian/Ubuntu package of 1.3.7 with the patch.

Either way, we should have a fix in Ubuntu soon.

[Launchpad Janitor (janitor)]

This bug was fixed in the package isomaster - 1.3.7-2

---------------
isomaster (1.3.7-2) unstable; urgency=low

  * Add patch for buffer overflow triggered by compilation with fortify flag
    (LP: #500151)
  * Standards-version to 3.8.4
 -- David Johnson <email address hidden> Mon, 08 Mar 2010 19:20:07 +0000

[Garazi (garazi111)]

I had this bug too and I was waiting for a patch...
So thanks a lot !! :-)

Isomaster works like a charm with Lucid now.