FS#45113 - [iproute2] *** buffer overflow detected ***: tc terminated - iproute2-ss150413

Attached to Project: Arch Linux
Opened by g0re (g0relike) - Thursday, 28 May 2015, 00:35 GMT
Last edited by Evangelos Foutras (foutrelis) - Thursday, 28 May 2015, 20:53 GMT
Task Type Bug Report
Category Packages: Core
Status Closed
Assigned To Ronald van Haren (pressh)
Architecture All
Severity High
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:

qdisc mq 0: root
Sent 559 bytes 7 pkt (dropped 0, overlimits 0 requeues 0)
backlog 0b 0p requeues 0
*** buffer overflow detected ***: tc terminated
======= Backtrace: =========
/usr/lib/libc.so.6(+0x69cab)[0xb756fcab]
/usr/lib/libc.so.6(__fortify_fail+0x37)[0xb75ffaf7]
/usr/lib/libc.so.6(+0xf7cb8)[0xb75fdcb8]
/usr/lib/libc.so.6(+0xf7675)[0xb75fd675]
/usr/lib/libc.so.6(__snprintf_chk+0x24)[0xb75fd574]
tc(print_tc_classid+0x68)[0x8051b98]
tc(print_qdisc+0x233)[0x804e553]
tc(rtnl_dump_filter_l+0x195)[0x8075345]
tc(rtnl_dump_filter+0x3d)[0x807558d]
tc[0x804ef25]
tc[0x804dd60]
tc(main+0x146)[0x804d746]
/usr/lib/libc.so.6(__libc_start_main+0xf7)[0xb751e637]
tc[0x804da03]
======= Memory map: ========
08048000-0809a000 r-xp 00000000 08:02 278113 /usr/bin/tc
0809a000-0809c000 r--p 00051000 08:02 278113 /usr/bin/tc
0809c000-0809f000 rw-p 00053000 08:02 278113 /usr/bin/tc
0809f000-080a1000 rw-p 00000000 00:00 0
08537000-08558000 rw-p 00000000 00:00 0 [heap]
b7504000-b7506000 rw-p 00000000 00:00 0
b7506000-b76b7000 r-xp 00000000 08:02 281103 /usr/lib/libc-2.21.so
b76b7000-b76b9000 r--p 001b1000 08:02 281103 /usr/lib/libc-2.21.so
b76b9000-b76ba000 rw-p 001b3000 08:02 281103 /usr/lib/libc-2.21.so
b76ba000-b76bd000 rw-p 00000000 00:00 0
b76bd000-b76c0000 r-xp 00000000 08:02 282234 /usr/lib/libdl-2.21.so
b76c0000-b76c1000 r--p 00002000 08:02 282234 /usr/lib/libdl-2.21.so
b76c1000-b76c2000 rw-p 00003000 08:02 282234 /usr/lib/libdl-2.21.so
b76c2000-b770e000 r-xp 00000000 08:02 283695 /usr/lib/libm-2.21.so
b770e000-b770f000 r--p 0004b000 08:02 283695 /usr/lib/libm-2.21.so
b770f000-b7710000 rw-p 0004c000 08:02 283695 /usr/lib/libm-2.21.so
b7712000-b772e000 r-xp 00000000 08:02 268256 /usr/lib/libgcc_s.so.1
b772e000-b772f000 rw-p 0001b000 08:02 268256 /usr/lib/libgcc_s.so.1
b772f000-b7732000 rw-p 00000000 00:00 0
b7732000-b7734000 r--p 00000000 00:00 0 [vvar]
b7734000-b7735000 r-xp 00000000 00:00 0 [vdso]
b7735000-b7757000 r-xp 00000000 08:02 283647 /usr/lib/ld-2.21.so
b7757000-b7758000 r--p 00021000 08:02 283647 /usr/lib/ld-2.21.so
b7758000-b7759000 rw-p 00022000 08:02 283647 /usr/lib/ld-2.21.so
bfd18000-bfd39000 rw-p 00000000 00:00 0 [stack]
qdisc fq_codel 0: Aborted

Additional info:
iproute2 4.0.0-1 - iproute2-ss150413

Steps to reproduce:
A simple tc -s -d q s dev wlan0 invokes the issue

workaround:
compile iproute2 using -Os -march=i686 -mtune=i686 (-O1/ -O2/ -O3 crash)




This task depends upon

Closed by  Evangelos Foutras (foutrelis)
Thursday, 28 May 2015, 20:53 GMT
Reason for closing:  Duplicate
Additional comments about closing:   FS#45031  -- This should be fixed in iproute2 4.0.0-2.

Loading...