Ulogd crashes when pcap file has wrong permissions

Bug #1429778 reported by Roman Fiedler
4
This bug affects 1 person
Affects Status Importance Assigned to Milestone
ulogd2 (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

When ulogd2 has problems reopening the pcap file it will crash immediately or some seconds later - most likely due to first attempt to flush packets to dump file after reopen (file NULL-ptr?).

Reproduce:

chown root.root /var/log/ulog/ulogd.pcap
chmod 0644 /var/log/ulog/ulogd.pcap

# Invoke command similar to logrotate:
invoke-rc.d ulogd2 reload

Mar 9 00:15:43 localhost ulogd[3567]: can't open pcap file /var/log/ulog/ulogd.pcap: Permission denied
Mar 9 00:15:44 localhost kernel: [210247.584746] ulogd[3567]: segfault at 0 ip 00007fbd8379fda0 sp 00007ffff30e8ed0 error 4 in libc-2.19.so[7fbd83731000+1bb000]

# lsb_release -rd
Description: Ubuntu 14.04.2 LTS
Release: 14.04

# apt-cache policy ulogd2-pcap
ulogd2-pcap:
  Installed: 2.0.3-1ubuntu2
  Candidate: 2.0.3-1ubuntu2
  Version table:
 *** 2.0.3-1ubuntu2 0
        500 http://debarchive-ehealth.d03.arc.local/ubuntu/ trusty/universe amd64 Packages
        100 /var/lib/dpkg/status
# apt-cache policy ulogd2
ulogd2:
  Installed: 2.0.3-1ubuntu2
  Candidate: 2.0.3-1ubuntu2
  Version table:
 *** 2.0.3-1ubuntu2 0
        500 http://debarchive-ehealth.d03.arc.local/ubuntu/ trusty/universe amd64 Packages
        100 /var/lib/dpkg/status

Revision history for this message
Jeremy Sowden (a3a3el) wrote (last edit ):

Yeah, I have a good idea what's happened there. I'll get it fixed upstream.

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package ulogd2 - 2.0.8-2

---------------
ulogd2 (2.0.8-2) unstable; urgency=medium

  * d/control:
    - bump Standards-Version to 4.6.2
    - remove obsolete dep on lsb-base
    - update my e-mail address
    - update pkg-config build-dep to pkgconf
  * d/patches:
    - refresh existing patches
    - add patches to fix possible null pointer dereference when reopening
      pcap output file (LP: #1429778).

 -- Jeremy Sowden <email address hidden> Sat, 02 Mar 2024 20:49:33 +0000

Changed in ulogd2 (Ubuntu):
status: New → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.