sdr buffer overflow on startup

[Steven McCoy]

Binary package hint: sdr

Description: Ubuntu 9.04
Release: 9.04
Package: sdr
Architecture: i386
Version: 3.0-7

steve-o@aiko:/tmp$ sdr
*** buffer overflow detected ***: sdr terminated
======= Backtrace: =========
/lib/tls/i686/cmov/libc.so.6(__fortify_fail+0x48)[0xb7cb2da8]
/lib/tls/i686/cmov/libc.so.6[0xb7cb0eb0]
sdr[0x805338b]
/lib/tls/i686/cmov/libc.so.6(__libc_start_main+0xe5)[0xb7bcb775]
sdr[0x804a1d1]
======= Memory map: ========
08048000-0810c000 r-xp 00000000 fc:01 114964 /usr/bin/sdr
0810c000-0810d000 r--p 000c3000 fc:01 114964 /usr/bin/sdr
0810d000-0810f000 rw-p 000c4000 fc:01 114964 /usr/bin/sdr
0810f000-08115000 rw-p 0810f000 00:00 0
08389000-083aa000 rw-p 08389000 00:00 0 [heap]
b7b1b000-b7b28000 r-xp 00000000 fc:01 164253 /lib/libgcc_s.so.1
b7b28000-b7b29000 r--p 0000c000 fc:01 164253 /lib/libgcc_s.so.1
b7b29000-b7b2a000 rw-p 0000d000 fc:01 164253 /lib/libgcc_s.so.1
b7b2a000-b7b34000 r-xp 00000000 fc:01 165522 /lib/tls/i686/cmov/libnss_files-2.9.so
b7b34000-b7b35000 r--p 00009000 fc:01 165522 /lib/tls/i686/cmov/libnss_files-2.9.so
b7b35000-b7b36000 rw-p 0000a000 fc:01 165522 /lib/tls/i686/cmov/libnss_files-2.9.so
b7b36000-b7b38000 rw-p b7b36000 00:00 0
b7b38000-b7b3c000 r-xp 00000000 fc:01 118178 /usr/lib/libXdmcp.so.6.0.0
b7b3c000-b7b3d000 rw-p 00003000 fc:01 118178 /usr/lib/libXdmcp.so.6.0.0
b7b3d000-b7b3f000 r-xp 00000000 fc:01 1016091 /usr/lib/libXau.so.6.0.0
b7b3f000-b7b40000 r--p 00001000 fc:01 1016091 /usr/lib/libXau.so.6.0.0
b7b40000-b7b41000 rw-p 00002000 fc:01 1016091 /usr/lib/libXau.so.6.0.0
b7b41000-b7b65000 r-xp 00000000 fc:01 165491 /lib/tls/i686/cmov/libm-2.9.so
b7b65000-b7b66000 r--p 00023000 fc:01 165491 /lib/tls/i686/cmov/libm-2.9.so
b7b66000-b7b67000 rw-p 00024000 fc:01 165491 /lib/tls/i686/cmov/libm-2.9.so
b7b67000-b7b7c000 r-xp 00000000 fc:01 165553 /lib/tls/i686/cmov/libpthread-2.9.so
b7b7c000-b7b7d000 r--p 00014000 fc:01 165553 /lib/tls/i686/cmov/libpthread-2.9.so
b7b7d000-b7b7e000 rw-p 00015000 fc:01 165553 /lib/tls/i686/cmov/libpthread-2.9.so
b7b7e000-b7b81000 rw-p b7b7e000 00:00 0
b7b81000-b7b83000 r-xp 00000000 fc:01 165490 /lib/tls/i686/cmov/libdl-2.9.so
b7b83000-b7b84000 r--p 00001000 fc:01 165490 /lib/tls/i686/cmov/libdl-2.9.so
b7b84000-b7b85000 rw-p 00002000 fc:01 165490 /lib/tls/i686/cmov/libdl-2.9.so
b7b85000-b7b9d000 r-xp 00000000 fc:01 1016099 /usr/lib/libxcb.so.1.1.0
b7b9d000-b7b9e000 r--p 00017000 fc:01 1016099 /usr/lib/libxcb.so.1.1.0
b7b9e000-b7b9f000 rw-p 00018000 fc:01 1016099 /usr/lib/libxcb.so.1.1.0
b7b9f000-b7bb1000 r-xp 00000000 fc:01 165557 /lib/tls/i686/cmov/libresolv-2.9.so
b7bb1000-b7bb2000 r--p 00011000 fc:01 165557 /lib/tls/i686/cmov/libresolv-2.9.so
b7bb2000-b7bb3000 rw-p 00012000 fc:01 165557 /lib/tls/i686/cmov/libresolv-2.9.so
b7bb3000-b7bb5000 rw-p b7bb3000 00:00 0
b7bb5000-b7d11000 r-xp 00000000 fc:01 164496 /lib/tls/i686/cmov/libc-2.9.so
b7d11000-b7d12000 ---p 0015c000 fc:01 164496 /lib/tls/i686/cmov/libc-2.9.so
b7d12000-b7d14000 r--p 0015c000 fc:01 164496 /lib/tls/i686/cmov/libc-2.9.so
b7d14000-b7d15000 rw-p 0015e000 fc:01 164496 /lib/tls/i686/cmov/libc-2.9.so
b7d15000-b7d18000 rw-p b7d15000 00:00 0
b7d18000-b7dc7000 r-xp 00000000 fc:01 117213 /usr/lib/libtcl8.4.so.0
b7dc7000-b7dc8000 r--p 000ae000 fc:01 117213 /usr/lib/libtcl8.4.so.0
b7dc8000-b7dd1000 rw-p 000af000 fc:01 117213 /usr/lib/libtcl8.4.so.0
b7dd1000-b7dd2000 rw-p b7dd1000 00:00 0
b7dd2000-b7eaa000 r-xp 00000000 fc:01 119387 /usr/lib/libtk8.4.so.0
b7eaa000-b7eab000 r--p 000d8000 fc:01 119387 /usr/lib/libtk8.4.so.0
b7eab000-b7eb6000 rw-p 000d9000 fc:01 119387 /usr/lib/libtk8.4.so.0
b7eb6000-b7eb8000 rw-p b7eb6000 00:00 0
b7eb8000-b7ed4000 r-xp 00000000 fc:01 114802 /usr/lib/libuclmmbase.so.1.2.16
b7ed4000-b7ed8000 rw-p 0001c000 fc:01 114802 /usr/lib/libuclmmbase.so.1.2.16
b7ed8000-b7edc000 rw-p b7ed8000 00:00 0
b7edc000-b7fc6000 r-xp 00000000 fc:01 115452 /usr/lib/libX11.so.6.2.0
b7fc6000-b7fc7000 ---p 000ea000 fc:01 115452 /usr/lib/libX11.so.6.2.0
b7fc7000-b7fc8000 r--p 000ea000 fc:Aborted

[Lasse Karstensen (lasse-karstensen)]

I'm also seeing this.

lkarsten@jungel:~$ sdr
*** buffer overflow detected ***: sdr terminated
======= Backtrace: =========
/lib/tls/i686/cmov/libc.so.6(__fortify_fail+0x48)[0xb7d8fda8]
/lib/tls/i686/cmov/libc.so.6[0xb7d8deb0]
sdr[0x805338b]
/lib/tls/i686/cmov/libc.so.6(__libc_start_main+0xe5)[0xb7ca8775]
sdr[0x804a1d1]
======= Memory map: ========
08048000-0810c000 r-xp 00000000 08:04 691263 /usr/bin/sdr
0810c000-0810d000 r--p 000c3000 08:04 691263 /usr/bin/sdr
0810d000-0810f000 rw-p 000c4000 08:04 691263 /usr/bin/sdr
0810f000-08115000 rw-p 0810f000 00:00 0
08bc7000-08be8000 rw-p 08bc7000 00:00 0 [heap]
b7bee000-b7bfb000 r-xp 00000000 08:04 1490965 /lib/libgcc_s.so.1
b7bfb000-b7bfc000 r--p 0000c000 08:04 1490965 /lib/libgcc_s.so.1
b7bfc000-b7bfd000 rw-p 0000d000 08:04 1490965 /lib/libgcc_s.so.1
b7bfd000-b7c02000 r-xp 00000000 08:04 1491278 /lib/tls/i686/cmov/libnss_dns-2.9.so
b7c02000-b7c03000 r--p 00004000 08:04 1491278 /lib/tls/i686/cmov/libnss_dns-2.9.so
b7c03000-b7c04000 rw-p 00005000 08:04 1491278 /lib/tls/i686/cmov/libnss_dns-2.9.so
b7c04000-b7c06000 r-xp 00000000 08:04 1492216 /lib/libnss_mdns4_minimal.so.2
b7c06000-b7c07000 rw-p 00001000 08:04 1492216 /lib/libnss_mdns4_minimal.so.2
b7c07000-b7c11000 r-xp 00000000 08:04 1491279 /lib/tls/i686/cmov/libnss_files-2.9.so
b7c11000-b7c12000 r--p 00009000 08:04 1491279 /lib/tls/i686/cmov/libnss_files-2.9.so
b7c12000-b7c13000 rw-p 0000a000 08:04 1491279 /lib/tls/i686/cmov/libnss_files-2.9.so
b7c13000-b7c15000 rw-p b7c13000 00:00 0
b7c15000-b7c19000 r-xp 00000000 08:04 688951 /usr/lib/libXdmcp.so.6.0.0
b7c19000-b7c1a000 rw-p 00003000 08:04 688951 /usr/lib/libXdmcp.so.6.0.0
b7c1a000-b7c1c000 r-xp 00000000 08:04 688525 /usr/lib/libXau.so.6.0.0
b7c1c000-b7c1d000 r--p 00001000 08:04 688525 /usr/lib/libXau.so.6.0.0
b7c1d000-b7c1e000 rw-p 00002000 08:04 688525 /usr/lib/libXau.so.6.0.0
b7c1e000-b7c42000 r-xp 00000000 08:04 1491273 /lib/tls/i686/cmov/libm-2.9.so
b7c42000-b7c43000 r--p 00023000 08:04 1491273 /lib/tls/i686/cmov/libm-2.9.so
b7c43000-b7c44000 rw-p 00024000 08:04 1491273 /lib/tls/i686/cmov/libm-2.9.so
b7c44000-b7c59000 r-xp 00000000 08:04 1491284 /lib/tls/i686/cmov/libpthread-2.9.so
b7c59000-b7c5a000 r--p 00014000 08:04 1491284 /lib/tls/i686/cmov/libpthread-2.9.so
b7c5a000-b7c5b000 rw-p 00015000 08:04 1491284 /lib/tls/i686/cmov/libpthread-2.9.so
b7c5b000-b7c5e000 rw-p b7c5b000 00:00 0
b7c5e000-b7c60000 r-xp 00000000 08:04 1491271 /lib/tls/i686/cmov/libdl-2.9.so
b7c60000-b7c61000 r--p 00001000 08:04 1491271 /lib/tls/i686/cmov/libdl-2.9.so
b7c61000-b7c62000 rw-p 00002000 08:04 1491271 /lib/tls/i686/cmov/libdl-2.9.so
b7c62000-b7c7a000 r-xp 00000000 08:04 688707 /usr/lib/libxcb.so.1.1.0
b7c7a000-b7c7b000 r--p 00017000 08:04 688707 /usr/lib/libxcb.so.1.1.0
b7c7b000-b7c7c000 rw-p 00018000 08:04 688707 /usr/lib/libxcb.so.1.1.0
b7c7c000-b7c8e000 r-xp 00000000 08:04 1491285 /lib/tls/i686/cmov/libresolv-2.9.so
b7c8e000-b7c8f000 r--p 00011000 08:04 1491285 /lib/tls/i686/cmov/libresolv-2.9.so
b7c8f000-b7c90000 rw-p 00012000 08:04 1491285 /lib/tls/i686/cmov/libresolv-2.9.so
b7c90...