[Bug 1131841] Re: gdb run as root: untrusted .gdbinit causes malloc arena corruption crash

Fri Feb 22 21:10:18 UTC 2013

Launchpad has imported 5 comments from the remote bug at
http://sourceware.org/bugzilla/show_bug.cgi?id=15174.

If you reply to an imported comment from within Launchpad, your comment
will be sent to the remote bug automatically. Read more about
Launchpad's inter-bugtracker facilities at
https://help.launchpad.net/InterBugTracking.

------------------------------------------------------------------------
On 2013-02-22T14:59:30+00:00 Bugz-o wrote:

Created attachment 6888
Full backtrace

When running gdb as root, the existence of ~/.gdbinit (untrusted) causes
gdb to crash with a duplicate free or other heap corruption.

Workaround: "mv ~/.gdbinit ~/gdbinit".

See attachment for full backtrace.

# gdb xxx
GNU gdb (GDB) 7.5-ubuntu
Copyright (C) 2012 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu".
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>...

warning: not using untrusted file "/users/joeuser/.gdbinit"
*** glibc detected *** /usr/bin/gdb: double free or corruption (!prev): 0x0000000000f25940 ***

Reply at:
https://bugs.launchpad.net/ubuntu/+source/gdb/+bug/1131841/comments/0

------------------------------------------------------------------------
On 2013-02-22T16:20:17+00:00 Tromey-redhat wrote:

(In reply to comment #0)

> GNU gdb (GDB) 7.5-ubuntu

I think this is probably specific to Ubuntu, maybe caused
by one of the patches they apply.

I tried this on my Fedora box using CVS HEAD gdb, and also
the upstream gdb 7.5 build, and it worked fine.

Could you try an upstream gdb?
If it still fails for you, we can try to get a more useful
stack trace.
If it doesn't fail, then I guess we can close this bug.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/gdb/+bug/1131841/comments/1

------------------------------------------------------------------------
On 2013-02-22T16:30:55+00:00 S-dave wrote:

I'll bet you're right. Let me build the official 7.5 sources myself and
see what happens. I'll let you know.

Thanks... Dave

-----Original Message-----
From: tromey at redhat dot com [mailto:sourceware-bugzilla at sourceware.org] 
Sent: Friday, February 22, 2013 11:20 AM
To: bugz at barachs.net
Subject: [Bug gdb/15174] gdb run as root: untrusted .gdbinit causes malloc arena corruption crash

http://sourceware.org/bugzilla/show_bug.cgi?id=15174

Tom Tromey <tromey at redhat dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |WAITING
                 CC|                            |tromey at redhat dot com

--- Comment #1 from Tom Tromey <tromey at redhat dot com> 2013-02-22 16:20:17 UTC ---
(In reply to comment #0)

> GNU gdb (GDB) 7.5-ubuntu

I think this is probably specific to Ubuntu, maybe caused
by one of the patches they apply.

I tried this on my Fedora box using CVS HEAD gdb, and also
the upstream gdb 7.5 build, and it worked fine.

Could you try an upstream gdb?
If it still fails for you, we can try to get a more useful
stack trace.
If it doesn't fail, then I guess we can close this bug.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/gdb/+bug/1131841/comments/2

------------------------------------------------------------------------
On 2013-02-22T16:44:43+00:00 S-dave wrote:

As you wrote, gdb-7.5 built from the upstream repo works fine. Sorry for
the annoyance...

Thanks... Dave

Reply at:
https://bugs.launchpad.net/ubuntu/+source/gdb/+bug/1131841/comments/3

------------------------------------------------------------------------
On 2013-02-22T18:35:08+00:00 Tromey-redhat wrote:

(In reply to comment #3)
> As you wrote, gdb-7.5 built from the upstream repo works fine. Sorry for the
> annoyance...

It is no trouble.  It isn't always obvious what bugs are from downstream
patches.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/gdb/+bug/1131841/comments/6

** Changed in: gdb
       Status: Unknown => Invalid

** Changed in: gdb
   Importance: Unknown => Low

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to gdb in Ubuntu.
https://bugs.launchpad.net/bugs/1131841

Title:
  gdb run as root: untrusted .gdbinit causes malloc arena corruption
  crash

Status in GNU Debugger:
  Invalid
Status in “gdb” package in Ubuntu:
  New

Bug description:
  When running gdb as root, the existence of ~/.gdbinit (untrusted) causes gdb to
  crash with a duplicate free or other heap corruption.

  This bug is due to some debian/ubuntu specific patches

  ProblemType: Bug
  DistroRelease: Ubuntu 12.10
  Package: gdb 7.5-0ubuntu2
  ProcVersionSignature: Ubuntu 3.5.0-23.35-generic 3.5.7.2
  Uname: Linux 3.5.0-23-generic x86_64
  NonfreeKernelModules: wl
  ApportVersion: 2.6.1-0ubuntu10
  Architecture: amd64
  Date: Fri Feb 22 17:36:12 2013
  InstallationDate: Installed on 2011-10-31 (480 days ago)
  InstallationMedia: Kubuntu 11.10 "Oneiric Ocelot" - Release amd64+mac (20111012)
  MarkForUpload: True
  SourcePackage: gdb
  UpgradeStatus: Upgraded to quantal on 2012-10-14 (131 days ago)

To manage notifications about this bug go to:
https://bugs.launchpad.net/gdb/+bug/1131841/+subscriptions