[Bug 498669] New: Nagios ntp check check_ntp_peer aborts due to buffer overflow
http://bugzilla.novell.com/show_bug.cgi?id=498669 Summary: Nagios ntp check check_ntp_peer aborts due to buffer overflow Classification: openSUSE Product: openSUSE 11.1 Version: Final Platform: All OS/Version: openSUSE 11.1 Status: NEW Severity: Normal Priority: P5 - None Component: Other AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: jschrod@acm.org QAContact: qa@suse.de Found By: --- User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.19) Gecko/20081213 SUSE/1.1.14-1.1 SeaMonkey/1.1.14 The Nagios check command check_ntp_peer aborts with a message that a buffer overflow is detected and outputs a stack backtrace. The check command is from package nagios-plugins-1.4.13-1.4. Reproducible: Always Steps to Reproduce: 1. Call /usr/lib/nagios/plugins/check_ntp_peer -H localhost This happens both on x86 and x86_64, so it's probably not system dependent. On localhost NTP is configured and active, in case that matters. Actual Results: Command output: *** buffer overflow detected ***: /usr/lib/nagios/plugins/check_ntp_peer terminated ======= Backtrace: ========= /lib/libc.so.6(__fortify_fail+0x48)[0xb7f55db8] /lib/libc.so.6[0xb7f53dd0] /lib/libc.so.6(__read_chk+0x58)[0xb7f542d8] /usr/lib/nagios/plugins/check_ntp_peer[0x804a0a1] /usr/lib/nagios/plugins/check_ntp_peer[0x804ac0e] /lib/libc.so.6(__libc_start_main+0xe5)[0xb7e85705] /usr/lib/nagios/plugins/check_ntp_peer[0x8048f01] ======= Memory map: ======== 08048000-0804f000 r-xp 00000000 09:02 430573 /usr/lib/nagios/plugins/check_ntp_peer 0804f000-08050000 r--p 00007000 09:02 430573 /usr/lib/nagios/plugins/check_ntp_peer 08050000-08051000 rw-p 00008000 09:02 430573 /usr/lib/nagios/plugins/check_ntp_peer 08051000-08072000 rw-p 08051000 00:00 0 [heap] b7e53000-b7e60000 r-xp 00000000 09:02 1215108 /lib/libgcc_s.so.1 b7e60000-b7e61000 r--p 0000c000 09:02 1215108 /lib/libgcc_s.so.1 b7e61000-b7e62000 rw-p 0000d000 09:02 1215108 /lib/libgcc_s.so.1 b7e62000-b7e6c000 r-xp 00000000 09:02 1216926 /lib/libnss_files-2.9.so b7e6c000-b7e6d000 r--p 00009000 09:02 1216926 /lib/libnss_files-2.9.so b7e6d000-b7e6e000 rw-p 0000a000 09:02 1216926 /lib/libnss_files-2.9.so b7e6e000-b7e6f000 rw-p b7e6e000 00:00 0 b7e6f000-b7fc4000 r-xp 00000000 09:02 1215002 /lib/libc-2.9.so b7fc4000-b7fc5000 ---p 00155000 09:02 1215002 /lib/libc-2.9.so b7fc5000-b7fc7000 r--p 00155000 09:02 1215002 /lib/libc-2.9.so b7fc7000-b7fc8000 rw-p 00157000 09:02 1215002 /lib/libc-2.9.so b7fc8000-b7fcc000 rw-p b7fc8000 00:00 0 b7fcc000-b7fcf000 r-xp 00000000 09:02 1216792 /lib/libdl-2.9.so b7fcf000-b7fd0000 r--p 00002000 09:02 1216792 /lib/libdl-2.9.so b7fd0000-b7fd1000 rw-p 00003000 09:02 1216792 /lib/libdl-2.9.so b7fd1000-b7ff8000 r-xp 00000000 09:02 1216921 /lib/libm-2.9.so b7ff8000-b7ff9000 r--p 00026000 09:02 1216921 /lib/libm-2.9.so b7ff9000-b7ffa000 rw-p 00027000 09:02 1216921 /lib/libm-2.9.so b7ffa000-b800c000 r-xp 00000000 09:02 1216929 /lib/libresolv-2.9.so b800c000-b800d000 r--p 00011000 09:02 1216929 /lib/libresolv-2.9.so b800d000-b800e000 rw-p 00012000 09:02 1216929 /lib/libresolv-2.9.so b800e000-b8010000 rw-p b800e000 00:00 0 b8010000-b8025000 r-xp 00000000 09:02 1215013 /lib/libnsl-2.9.so b8025000-b8026000 r--p 00014000 09:02 1215013 /lib/libnsl-2.9.so b8026000-b8027000 rw-p 00015000 09:02 1215013 /lib/libnsl-2.9.so b8027000-b8029000 rw-p b8027000 00:00 0 b804e000-b804f000 rw-p b804e000 00:00 0 b804f000-b806d000 r-xp 00000000 09:02 1217040 /lib/ld-2.9.so b806d000-b806e000 r--p 0001d000 09:02 1217040 /lib/ld-2.9.so b806e000-b806f000 rw-p 0001e000 09:02 1217040 /lib/ld-2.9.so bfc58000-bfc6e000 rw-p bffea000 00:00 0 [stack] ffffe000-fffff000 r-xp 00000000 00:00 0 [vdso] Aborted Expected Results: Command shall check if I have good NTP peers. I know of check_ntp and that works; but that's deprecated. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=498669 Marcus Meissner <meissner@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|bnc-team-screening@forge.pr |cschneemann@novell.com |ovo.novell.com | -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=498669 User cschneemann@novell.com added comment http://bugzilla.novell.com/show_bug.cgi?id=498669#c1 Christian Schneemann <cschneemann@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED --- Comment #1 from Christian Schneemann <cschneemann@novell.com> 2009-05-15 05:03:25 MDT --- Hi, thanks for the report, I've backported the fix from current svn version. Upstream: http://sourceforge.net/tracker/index.php?func=detail&aid=1999319&group_id=29880&atid=397597 -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=498669 User cschneemann@novell.com added comment http://bugzilla.novell.com/show_bug.cgi?id=498669#c2 Christian Schneemann <cschneemann@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Resolution| |FIXED --- Comment #2 from Christian Schneemann <cschneemann@novell.com> 2009-07-07 03:11:25 MDT --- Fixed package submitted to Factory and OBS server:monitoring/nagios-plugins -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
http://bugzilla.novell.com/show_bug.cgi?id=498669 http://bugzilla.novell.com/show_bug.cgi?id=498669#c3 --- Comment #3 from Bernhard Wiedemann <bwiedemann@suse.com> --- This is an autogenerated message for OBS integration: This bug (498669) was mentioned in https://build.opensuse.org/request/show/10356 Factory / nagios-plugins -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@novell.com