Bug #294599 “*** buffer overflow detected ***: apachetop termina...” : Bugs : apachetop package : Ubuntu

Revision history for this message

In Red Hat Bugzilla #446199, Robert (robert-redhat-bugs-1) wrote on 2008-05-13:

#19

Download full text (5.1 KiB)

Description of problem:
Please note, that the following problem also applies to Fedora 9.

robert@tux:~ > apachetop -f /var/log/httpd/access_log
*** buffer overflow detected ***: apachetop terminated
======= Backtrace: =========
/lib/libc.so.6(__fortify_fail+0x48)[0x3cec48]
/lib/libc.so.6[0x3ccd40]
/lib/libc.so.6[0x3cd4a8]
apachetop(__gxx_personality_v0+0x46d)[0x80496a5]
apachetop[0x804a2d6]
/lib/libc.so.6(__libc_start_main+0xe6)[0x2ee5d6]
apachetop(__gxx_personality_v0+0xd9)[0x8049311]
======= Memory map: ========
00110000-0012c000 r-xp 00000000 68:02 2965506 /lib/ld-2.8.so
0012c000-0012d000 r-xp 0001c000 68:02 2965506 /lib/ld-2.8.so
0012d000-0012e000 rwxp 0001d000 68:02 2965506 /lib/ld-2.8.so
0012e000-0012f000 r-xp 0012e000 00:00 0 [vdso]
0012f000-00160000 r-xp 00000000 68:02 2965525 /lib/libreadline.so.5.2
00160000-00164000 rwxp 00031000 68:02 2965525 /lib/libreadline.so.5.2
00164000-00165000 rwxp 00164000 00:00 0
00165000-00186000 r-xp 00000000 68:02 2965732 /lib/libncurses.so.5.6
00186000-00187000 rwxp 00020000 68:02 2965732 /lib/libncurses.so.5.6
00187000-001b0000 r-xp 00000000 68:02 2965518 /lib/libpcre.so.0.0.1
001b0000-001b1000 rwxp 00028000 68:02 2965518 /lib/libpcre.so.0.0.1
001b1000-00296000 r-xp 00000000 68:02 393288 /usr/lib/libstdc++.so.6.0.10
00296000-0029a000 r-xp 000e4000 68:02 393288 /usr/lib/libstdc++.so.6.0.10
0029a000-0029b000 rwxp 000e8000 68:02 393288 /usr/lib/libstdc++.so.6.0.10
0029b000-002a1000 rwxp 0029b000 00:00 0
002a1000-002c8000 r-xp 00000000 68:02 2965678 /lib/libm-2.8.so
002c8000-002c9000 r-xp 00026000 68:02 2965678 /lib/libm-2.8.so
002c9000-002ca000 rwxp 00027000 68:02 2965678 /lib/libm-2.8.so
002ca000-002d7000 r-xp 00000000 68:02 2965617 /lib/libgcc_s-4.3.0-20080428.so.1
002d7000-002d8000 rwxp 0000c000 68:02 2965617 /lib/libgcc_s-4.3.0-20080428.so.1
002d8000-0043b000 r-xp 00000000 68:02 2965520 /lib/libc-2.8.so
0043b000-0043d000 r-xp 00163000 68:02 2965520 /lib/libc-2.8.so
0043d000-0043e000 rwxp 00165000 68:02 2965520 /lib/libc-2.8.so
0043e000-00441000 rwxp 0043e000 00:00 0
00441000-00457000 r-xp 00000000 68:02 2965736 /lib/libtinfo.so.5.6
00457000-0045a000 rwxp 00015000 68:02 2965736 /lib/libtinfo.so.5.6
0045a000-0045d000 r-xp 00000000 68:02 2965644 /lib/libdl-2.8.so
0045d000-0045e000 r-xp 00002000 68:02 2965644 /lib/libdl-2.8.so
0045e000-0045f000 rwxp 00003000 68:02 2965644 /lib/libdl-2.8.so
08048000-08051000 r-xp 00000000 68:02 377773 /usr/bin/apachetop
08051000-08052000 rw-p 00009000 68:02 377773 /usr/bin/apachetop
0960c000-0962d000 rw-p 0960c000 00:00 0
b7f3c000-b7f40000 rw-p b7f3c000 00:00 0
bfb28000-bfb3d000 rw-p bffea000 00:00 0 [stack]
Canceled
robert@tux:~ >

Version-Release number of selected component (if applicable):
apachetop-0.12.6-4

How reproducible:
Everytime, just: apachetop -f /var/log/httpd/access_log

Actual results:
*** buffer overflow detected ***: apachetop terminated

Expected results:
Just working...

Additional info:
(gdb) bt
#0 0x0012e402 in __kernel_vsyscall ()
#1 0x00302660 in raise (sig=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
#2 0x00304028 in abort () at abort....

Description of problem:
Please note, that the following problem also applies to Fedora 9.

robert@tux:~ > apachetop -f /var/log/httpd/access_log
*** buffer overflow detected ***: apachetop terminated
======= Backtrace: =========
/lib/libc.so.6(__fortify_fail+0x48)[0x3cec48]
/lib/libc.so.6[0x3ccd40]
/lib/libc.so.6[0x3cd4a8]
apachetop(__gxx_personality_v0+0x46d)[0x80496a5]
apachetop[0x804a2d6]
/lib/libc.so.6(__libc_start_main+0xe6)[0x2ee5d6]
apachetop(__gxx_personality_v0+0xd9)[0x8049311]
======= Memory map: ========
00110000-0012c000 r-xp 00000000 68:02 2965506    /lib/ld-2.8.so
0012c000-0012d000 r-xp 0001c000 68:02 2965506    /lib/ld-2.8.so
0012d000-0012e000 rwxp 0001d000 68:02 2965506    /lib/ld-2.8.so
0012e000-0012f000 r-xp 0012e000 00:00 0          [vdso]
0012f000-00160000 r-xp 00000000 68:02 2965525    /lib/libreadline.so.5.2
00160000-00164000 rwxp 00031000 68:02 2965525    /lib/libreadline.so.5.2
00164000-00165000 rwxp 00164000 00:00 0
00165000-00186000 r-xp 00000000 68:02 2965732    /lib/libncurses.so.5.6
00186000-00187000 rwxp 00020000 68:02 2965732    /lib/libncurses.so.5.6
00187000-001b0000 r-xp 00000000 68:02 2965518    /lib/libpcre.so.0.0.1
001b0000-001b1000 rwxp 00028000 68:02 2965518    /lib/libpcre.so.0.0.1
001b1000-00296000 r-xp 00000000 68:02 393288     /usr/lib/libstdc++.so.6.0.10
00296000-0029a000 r-xp 000e4000 68:02 393288     /usr/lib/libstdc++.so.6.0.10
0029a000-0029b000 rwxp 000e8000 68:02 393288     /usr/lib/libstdc++.so.6.0.10
0029b000-002a1000 rwxp 0029b000 00:00 0
002a1000-002c8000 r-xp 00000000 68:02 2965678    /lib/libm-2.8.so
002c8000-002c9000 r-xp 00026000 68:02 2965678    /lib/libm-2.8.so
002c9000-002ca000 rwxp 00027000 68:02 2965678    /lib/libm-2.8.so
002ca000-002d7000 r-xp 00000000 68:02 2965617    /lib/libgcc_s-4.3.0-20080428.so.1
002d7000-002d8000 rwxp 0000c000 68:02 2965617    /lib/libgcc_s-4.3.0-20080428.so.1
002d8000-0043b000 r-xp 00000000 68:02 2965520    /lib/libc-2.8.so
0043b000-0043d000 r-xp 00163000 68:02 2965520    /lib/libc-2.8.so
0043d000-0043e000 rwxp 00165000 68:02 2965520    /lib/libc-2.8.so
0043e000-00441000 rwxp 0043e000 00:00 0
00441000-00457000 r-xp 00000000 68:02 2965736    /lib/libtinfo.so.5.6
00457000-0045a000 rwxp 00015000 68:02 2965736    /lib/libtinfo.so.5.6
0045a000-0045d000 r-xp 00000000 68:02 2965644    /lib/libdl-2.8.so
0045d000-0045e000 r-xp 00002000 68:02 2965644    /lib/libdl-2.8.so
0045e000-0045f000 rwxp 00003000 68:02 2965644    /lib/libdl-2.8.so
08048000-08051000 r-xp 00000000 68:02 377773     /usr/bin/apachetop
08051000-08052000 rw-p 00009000 68:02 377773     /usr/bin/apachetop
0960c000-0962d000 rw-p 0960c000 00:00 0
b7f3c000-b7f40000 rw-p b7f3c000 00:00 0
bfb28000-bfb3d000 rw-p bffea000 00:00 0          [stack]
Canceled
robert@tux:~ >

Version-Release number of selected component (if applicable):
apachetop-0.12.6-4

How reproducible:
Everytime, just: apachetop -f /var/log/httpd/access_log

Actual results:
*** buffer overflow detected ***: apachetop terminated

Expected results:
Just working...

Additional info:
(gdb) bt
#0  0x0012e402 in __kernel_vsyscall ()
#1  0x00302660 in raise (sig=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
#2  0x00304028 in abort () at abort.c:88
#3  0x0033f5bd in __libc_message (do_abort=2, fmt=0x411bbd "*** %s ***: %s
terminated\n") at ../sysdeps/unix/sysv/linux/libc_fatal.c:170
#4  0x003cec48 in __fortify_fail (msg=0x411b8c "buffer overflow detected") at
fortify_fail.c:32
#5  0x003ccd40 in __chk_fail () at chk_fail.c:29
#6  0x003cd4a8 in __realpath_chk (buf=0xbffdd9c8 "/var/log/httpd/access_log",
resolved=0xbffd3e48 "8 /\tpáC", resolvedlen=128) at realpath_chk.c:30
#7  0x080496a5 in new_file ()
#8  0x0804a2d6 in main ()
(gdb) bt full
#0  0x0012e402 in __kernel_vsyscall ()
No symbol table info available.
#1  0x00302660 in raise (sig=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
        resultvar = <value optimized out>
        pid = 4444148
        selftid = 5642
#2  0x00304028 in abort () at abort.c:88
        act = {__sigaction_handler = {sa_handler = 0xbffd36ac, sa_sigaction =
0xbffd36ac}, sa_mask = {__val = {4131897, 1233472, 0, 1233472, 0, 3221043000,
134517521, 1234520, 3, 951, 134514798, 3,
      134513068, 134513140, 3858732, 9, 3221042928, 3, 3233108, 4444148, 9, 7,
3221043044, 3980792, 3, 3221042928, 9, 0, 4263955, 4263951, 4267973, 4266865}},
sa_flags = 4266889, sa_restorer = 0x411b85}
        sigs = {__val = {32, 0 <repeats 31 times>}}
#3  0x0033f5bd in __libc_message (do_abort=2, fmt=0x411bbd "*** %s ***: %s
terminated\n") at ../sysdeps/unix/sysv/linux/libc_fatal.c:170
        ap = 0xbffd3d88 "ôÏC"
        fd = 3
        on_2 = <value optimized out>
        list = <value optimized out>
        nlist = 5
        cp = <value optimized out>
        written = 6
#4  0x003cec48 in __fortify_fail (msg=0x411b8c "buffer overflow detected") at
fortify_fail.c:32
No locals.
#5  0x003ccd40 in __chk_fail () at chk_fail.c:29
No locals.
#6  0x003cd4a8 in __realpath_chk (buf=0xbffdd9c8 "/var/log/httpd/access_log",
resolved=0xbffd3e48 "8 /\tpáC", resolvedlen=128) at realpath_chk.c:30
No locals.
#7  0x080496a5 in new_file ()
No symbol table info available.
#8  0x0804a2d6 in main ()
No symbol table info available.
(gdb)

Revision history for this message

In Red Hat Bugzilla #446199, Bug (bug-redhat-bugs) wrote on 2008-05-14:

#20

Changing version to '9' as part of upcoming Fedora 9 GA.
More information and reason for this action is here:
http://fedoraproject.org/wiki/BugZappers/HouseKeeping

Revision history for this message

In Red Hat Bugzilla #446199, Robert (robert-redhat-bugs-1) wrote on 2008-05-17:

#21

Ping?

Revision history for this message

In Red Hat Bugzilla #446199, Brad (brad-redhat-bugs) wrote on 2008-06-03:

#22

apachetop-0.12.6-4.fc9.x86_64 does the same for me.

Revision history for this message

In Red Hat Bugzilla #446199, Robert (robert-redhat-bugs-1) wrote on 2008-06-21:

#23

Created attachment 309968
apachetop-0.12.6-maxpathlen.patch

This patch solves the problem for me. Looks like behaviour changed a bit
compared with previous versions of Fedora. New apachetop-0.12.6-5 package
will fix this for Fedora 9 and Rawhide.

Revision history for this message

In Red Hat Bugzilla #446199, Robert (robert-redhat-bugs-1) wrote on 2008-06-21:

#24

Package: apachetop-0.12.6-5.fc10 Tag: dist-f10 Status: complete
Package: apachetop-0.12.6-5.fc9 Tag: dist-f9-updates-candidate Status: complete

Revision history for this message

In Red Hat Bugzilla #446199, Fedora (fedora-redhat-bugs) wrote on 2008-06-21:

#25

apachetop-0.12.6-5.fc9 has been submitted as an update for Fedora 9

Revision history for this message

In Red Hat Bugzilla #446199, Fedora (fedora-redhat-bugs) wrote on 2008-06-22:

#26

apachetop-0.12.6-5.fc9 has been pushed to the Fedora 9 stable repository. If problems still persist, please make note of it in this bug report.

Revision history for this message

xzirrow (xzirrow) wrote on 2008-11-06:

#1

apachetop.log Edit (4.7 KiB, text/plain)

Revision history for this message

Nikil Mehta (nikil.mehta) wrote on 2008-11-16:

#2

apachetop-0.12.6-maxpathlen.patch Edit (1.5 KiB, text/plain)

Here's a patch from Fedora that fixes the problem. Will somebody merge this into the package? I don't know how that works.

You can rebuild this from source if you want to use it now. Just do:

sudo apt-get install libreadline-dev libncurses-dev

to get the appropriates files needed to compile. Then do:

apt-get source apachetop

and from inside the apachetop source directory:

patch -p1 < apachetop-0.12.6-maxpathlen.patch
./configure && make install

will do the trick.

Revision history for this message

Martin Kaufmann (martin.kaufmann) wrote on 2008-11-18:

#3

apachetop.debdiff Edit (6.9 KiB, text/plain)

Hi,

i have made a debdiff with the Patch included

Bug Watch Updater (bug-watch-updater) on 2009-01-22

Changed in apachetop:
status:	Unknown → Fix Released

Revision history for this message

Lionel Porcheron (lionel.porcheron) wrote on 2009-02-19:

#4

Hi Martin,

With the patch applied, apachetop failed to build here. Have you successfully built the package on a recent jaunty?
I'm unsubscribing Ubuntu Sponsors for Universe now, feel free to resubscribe the team once we have a patch ready.

Revision history for this message

dc (darkcharl) wrote on 2009-02-26:

#5

Confirmed, stumbled upon it, too. Debdiff for recent 8.10.

Revision history for this message

dc (darkcharl) wrote on 2009-02-26:

#6

apachetop-0.12.6-maxpathlen-ubuntu.patch Edit (1.1 KiB, text/plain)

Lionel is right, MAXPATHLEN will not be defined with the above fix, PATH_MAX is in linux/limits.h. /And MAXPATHLEN is taking PATH_MAX in params.h/

Revision history for this message

dc (darkcharl) wrote on 2009-02-26:

#7

apachetop_0.12.6-8ubuntu1.debdiff Edit (8.0 KiB, text/plain)

Attached debdiff.

Revision history for this message

dc (darkcharl) wrote on 2009-02-28:

#8

deb Edit (33.9 KiB, application/x-debian-package)

Attached updated working deb for those who miss it.

Revision history for this message

dc (darkcharl) wrote on 2009-02-28:

#9

apachetop_0.12.6-8ubuntu1_i386.deb.and.src.tar.bz2 Edit (108.7 KiB, application/octet-stream)

Attached src also for the more paranoid.

Revision history for this message

dc (darkcharl) wrote on 2009-03-10:

#10

Patch provided below.

Changed in apachetop:
status:	New → Confirmed

Revision history for this message

Olivier Jacquet (ojacquet) wrote on 2009-07-11:

#11

Apachetop still crashes and the last comment was in March. Will this fix be available soon?

Revision history for this message

H.-Dirk Schmitt (dirk-computer42) wrote on 2009-07-16:

#12

also broken in jaunty/amd64: 0.12.6-9

Revision history for this message

ironstorm (ironstorm-gmail) wrote on 2009-08-07:

#13

Was also crashing for me with this error on AMD64 / Jaunty.

After applying dc's patch to the source tarball and recompiling, it now works.

Bit of a shame we can't get this pushed into Karmic, the package is pretty worthless in its current state.

Revision history for this message

dave b. (d+b) wrote on 2009-09-05:

#14

Why hasn't the patch been applied ? ....

Surely this should make karmic .....

Revision history for this message

Nicolas Van Wambeke (nicolasvw) wrote on 2009-09-12:

#15

apachetop_0.12.6-12ubuntu1.debdiff Edit (290.6 KiB, text/plain)

Here is a debdiff against 0.12.6-12 which is current in karmic including the above patch.
The package builds fine in a karmic pbuilder.

Revision history for this message

Launchpad Janitor (janitor) wrote on 2009-09-18:

#16

This bug was fixed in the package apachetop - 0.12.6-12ubuntu1

---------------
apachetop (0.12.6-12ubuntu1) karmic; urgency=low

* Added patch 02-maxpathlen.patch (LP: #294599)

-- Nicolas Van Wambeke <email address hidden> Sat, 12 Sep 2009 11:27:23 +0200

Changed in apachetop (Ubuntu):
status:	Confirmed → Fix Released

Revision history for this message

Nigel Cunningham (nigelc) wrote on 2009-10-28:

#17

What about Jaunty?

At the time of writing, it's still the current release, and this package is completely useless on it.

Revision history for this message

Igloo (ubuntu-iggo) wrote on 2010-01-16:

#18

This is still broken on ubuntu 9.04 x64 too...

Bug Watch Updater (bug-watch-updater) on 2017-10-28

Changed in apachetop (Fedora):
importance:	Unknown → High

Affects		Status	Importance	Assigned to
	apachetop (Fedora)	Fix Released	High	redhat-bugs #446199
	apachetop (Ubuntu)	Fix Released	Undecided	Unassigned
Nominated for Jaunty by Nigel Cunningham
Nominated for Karmic by dc

Ubuntu
apachetop package

* buffer overflow detected *: apachetop terminated

Bug Description

Related branches

Duplicates of this bug

Other bug subscribers

Patches

Bug attachments

Remote bug watches

Ubuntuapachetop package

*** buffer overflow detected ***: apachetop terminated

Bug Description

Related branches

Duplicates of this bug

Other bug subscribers

Patches

Bug attachments

Remote bug watches

Ubuntu
apachetop package

* buffer overflow detected *: apachetop terminated