[VROC] [Ub 24.04] mdadm: buffer overflow detected
Affects | Status | Importance | Assigned to | Milestone | ||
---|---|---|---|---|---|---|
mdadm (Ubuntu) | Status tracked in Oracular | |||||
Noble |
Incomplete
|
Undecided
|
Hector CAO | |||
Oracular |
Fix Released
|
Undecided
|
Hector CAO |
Bug Description
[ Impact ]
mdadm crashes sporadically with error *** buffer overflow detected *** at some invokations:
- mdadm --detail-pl
- mdadm -CR /dev/md0 -l1 -n2 /dev/nvme0n1 /dev/nvme1n1
*** buffer overflow detected ***: terminated
Aborted (core dumped)
[ Test Plan ]
- Install mdadm
- Issue this command several times:
mdadm --detail-pl
[ Where problems could occur ]
The fix is very small and basically it replaces the unsafe functions call
to sprintf by calling snprintf for Intel platforms (platform_intel.c)
I do not expect high regression risk.
[ Other Info ]
mdadm is built with FORTIFY_SOURCE=3 (as it is done in Ubuntu 24.04).
and it uses the unsafe function sprintf() that will cause the
buffer-overflow error
It is fixed in mdadm upstream:
https:/
description: | updated |
Changed in mdadm (Ubuntu): | |
assignee: | nobody → Hector CAO (hectorcao) |
Changed in mdadm (Ubuntu): | |
status: | Confirmed → In Progress |
Changed in mdadm (Ubuntu Noble): | |
status: | New → In Progress |
assignee: | nobody → Hector CAO (hectorcao) |
Changed in mdadm (Ubuntu Noble): | |
status: | Confirmed → In Progress |
Hello,
do you have any update?