[Bug 1197985] New: double free in libldap since upgrading to 2.5.9 on dlclose
http://bugzilla.opensuse.org/show_bug.cgi?id=1197985 Bug ID: 1197985 Summary: double free in libldap since upgrading to 2.5.9 on dlclose Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: screening-team-bugs@suse.de Reporter: mrueckert@suse.com QA Contact: qa-bugs@suse.de Found By: --- Blocker: --- #0 __pthread_kill_implementation (threadid=<optimized out>, signo=signo@entry=6, no_tid=no_tid@entry=0) at pthread_kill.c:44 #1 0x00007f477d53b1e3 in __pthread_kill_internal (signo=6, threadid=<optimized out>) at pthread_kill.c:78 #2 0x00007f477d4eb306 in __GI_raise (sig=sig@entry=6) at ../sysdeps/posix/raise.c:26 #3 0x00007f477d4d4813 in __GI_abort () at abort.c:79 #4 0x00007f477d52e1b7 in __libc_message (action=action@entry=do_abort, fmt=fmt@entry=0x7f477d674618 "%s\n") at ../sysdeps/posix/libc_fatal.c:155 #5 0x00007f477d545c9c in malloc_printerr (str=str@entry=0x7f477d677260 "double free or corruption (out)") at malloc.c:5664 #6 0x00007f477d547ef0 in _int_free (av=0x7f477d6aeaa0 <main_arena>, p=0x7f47789219e0 <sb_sasl_generic_read+704>, have_lock=<optimized out>) at malloc.c:4588 #7 0x00007f477d54a753 in __GI___libc_free (mem=<optimized out>) at malloc.c:3391 #8 0x00007f477781b6b7 in ldap_int_destroy_global_options () at /usr/src/debug/openldap2-2.5.9-72.1.x86_64/libraries/libldap/init.c:543 #9 0x00007f477da32182 in call_destructors (closure=closure@entry=0x563c1da1e990) at dl-close.c:129 #10 0x00007f477d60ef65 in __GI__dl_catch_exception (exception=exception@entry=0x0, operate=operate@entry=0x7f477da3213e <call_destructors>, args=args@entry=0x563c1da1e990) at /usr/src/debug/glibc-2.35-2.1.x86_64/elf/dl-error-skeleton.c:182 #11 0x00007f477da326b6 in _dl_close_worker (map=map@entry=0x563c1daab7c0, force=force@entry=false) at dl-close.c:292 #12 0x00007f477da3313b in _dl_close (_map=0x563c1daab7c0) at dl-close.c:818 #13 0x00007f477d60ef08 in __GI__dl_catch_exception (exception=exception@entry=0x7ffeaa6fc950, operate=<optimized out>, args=<optimized out>) at /usr/src/debug/glibc-2.35-2.1.x86_64/elf/dl-error-skeleton.c:208 #14 0x00007f477d60efe3 in __GI__dl_catch_error (objname=0x7ffeaa6fc9a8, errstring=0x7ffeaa6fc9b0, mallocedp=0x7ffeaa6fc9a7, operate=<optimized out>, args=<optimized out>) at /usr/src/debug/glibc-2.35-2.1.x86_64/elf/dl-error-skeleton.c:227 #15 0x00007f477d5347ce in _dlerror_run (operate=<optimized out>, args=<optimized out>) at dlerror.c:138 #16 0x00007f477d5344d8 in __dlclose (handle=<optimized out>) at dlclose.c:31 #17 0x00007f4778a15c31 in library_free (library=0x563c1c9769d0) at /home/abuild/rpmbuild/BUILDROOT/rubygem-ffi-1.15.5-1.7.x86_64/usr/lib64/ruby/gems/2.7.0/gems/ffi-1.15.5/ext/ffi_c/DynamicLibrary.c:171 #18 0x00007f477d77d6c5 in run_final (zombie=94816153083400, objspace=0x563c16c39830) at /usr/src/debug/ruby2.7-2.7.5-25.15.x86_64/gc.c:3372 #19 finalize_list (objspace=objspace@entry=0x563c16c39830, zombie=94816153083400) at /usr/src/debug/ruby2.7-2.7.5-25.15.x86_64/gc.c:3391 #20 0x00007f477d77dbaf in rb_objspace_call_finalizer (objspace=0x563c16c39830) at /usr/src/debug/ruby2.7-2.7.5-25.15.x86_64/gc.c:3536 #21 0x00007f477d76fd33 in rb_ec_finalize (ec=0x563c16c39cc0) at /usr/src/debug/ruby2.7-2.7.5-25.15.x86_64/eval.c:152 #22 rb_ec_cleanup (ec=ec@entry=0x563c16c39cc0, ex=<optimized out>) at /usr/src/debug/ruby2.7-2.7.5-25.15.x86_64/eval.c:256 #23 0x00007f477d76ffa2 in ruby_run_node (n=0x563c16c3fef8) at /usr/src/debug/ruby2.7-2.7.5-25.15.x86_64/eval.c:336 #24 0x0000563c1520210b in main (argc=<optimized out>, argv=<optimized out>) at ./main.c:50 -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1197985 Marcus R�ckert <mrueckert@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |michael@stroeder.com -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1197985 Marcus R�ckert <mrueckert@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |mail@philipp-wagner.com -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1197985 http://bugzilla.opensuse.org/show_bug.cgi?id=1197985#c1 Marcus R�ckert <mrueckert@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #1 from Marcus R�ckert <mrueckert@suse.com> --- seems it was a mix of ldap 2.4 and 2.5 in the same binary which went undetected. -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@suse.com