less crashed with SIGSEGV

Bug #197792 reported by Till Ulen
6
Affects Status Importance Assigned to Milestone
less (Ubuntu)
Fix Released
Medium
Unassigned
Nominated for Gutsy by Till Ulen
Nominated for Hardy by Till Ulen

Bug Description

Binary package hint: less

How to reproduce:

1. Open a GNOME Terminal
2. Create a test file by running the command
   echo foobar > foofile
3. Run the command
   less foofile -S
4. Press :
5. Press n

This results in a segmentation fault. An error message should be shown instead.

I'm using Ubuntu 7.10 with latest security and recommended updates. Package less is version 406-0.

ProblemType: Crash
Architecture: i386
Date: Mon Mar 3 04:40:33 2008
Dependencies:
 libgcc1 1:4.2.1-5ubuntu4
 gcc-4.2-base 4.2.1-5ubuntu4
 debianutils 2.22.1
 libncurses5 5.6+20070716-1ubuntu3
 libc6 2.6.1-1ubuntu10
DistroRelease: Ubuntu 7.10
ExecutablePath: /usr/bin/less
NonfreeKernelModules: cdrom
Package: less 406-0
PackageArchitecture: i386
ProcCmdline: less foofile -S
ProcCwd: /home/users/alexkon
ProcEnviron:
 SHELL=/bin/bash
 PATH=/home/users/alexkon/bin:/home/users/alexkon/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games
 LANG=en_US.UTF-8
 LANGUAGE=en_US:en
Signal: 11
SourcePackage: less
StacktraceTop:
 ?? ()
 ?? ()
 ?? ()
 ?? ()
 ?? () from /lib/tls/i686/cmov/libc.so.6
Title: less crashed with SIGSEGV
Uname: Linux chronos 2.6.22-14-generic #1 SMP Tue Feb 12 07:42:25 UTC 2008 i686 GNU/Linux
UserGroups: audio cdrom floppy fuse plugdev scanner tape
SegvAnalysis:
 Segfault happened at: 0x804b30c: testb $0x8,0x40c(%eax)
 PC (0x0804b30c) ok
 source "$0x8" ok
 destination "0x40c(%eax)" (0x0000040c) not located in a known VMA region (needed writable region)!
SegvReason: writing NULL VMA

Tags: apport-crash
Revision history for this message
Till Ulen (tillulen) wrote :
Revision history for this message
Apport retracing service (apport) wrote : Symbolic stack trace

StacktraceTop:ch_length () at ch.c:508
ch_seek (pos=0) at ch.c:419
jump_loc (pos=0, sline=0) at jump.c:199
repaint () at jump.c:98
error (fmt=0x805db24 "%s", parg=0xbf976f7c) at output.c:529

Revision history for this message
Apport retracing service (apport) wrote : Symbolic threaded stack trace
Revision history for this message
Apport retracing service (apport) wrote : Stack trace with source code
Changed in less:
importance: Undecided → Medium
Revision history for this message
Till Ulen (tillulen) wrote :

This bug no longer occurs with less version 418-1 from Ubuntu 8.04 Hardy.

Kees Cook (kees)
description: updated
Changed in less (Ubuntu):
status: New → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.