[Bug 128624]

[Simon McVittie]

On Bug #15589, Scott wrote this useful-looking summary of the bug:
> D-Bus relies on the userdb cache being enabled to be able to hold on to user
> info structures (which don't have refcounting).
>
> Test case:
>  1) disable the userdb cache
>  2) start a minimal dbus server
>  3) connect to it _from the same username_
>
> The server will have already looked up its own username, and will be holding on
> to the info for that (to compare it against users coming in, I suspect).
>
> When the new connection comes in, it will look up the username of *that*, which
> will invalidate the existing entry in the hash table.  Then when it compares
> the new info with the info of its own user, you'll be reading from free'd
> memory.
>
> This could be partially fixed by not putting new info entries into the hash
> table, but then there'd be a memory leak for every time you looked one up,
> since it won't be clear who owns it.

Dropping priority and severity since this now only happens in a non-
default compile-time configuration (you have to disable the userdb cache
explicitly).

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to dbus in Ubuntu.
https://bugs.launchpad.net/bugs/128624

Title:
  dbus-daemon crashed with SIGSEGV in strcmp()

Status in D-Bus:
  Confirmed
Status in “dbus” package in Ubuntu:
  Fix Released

Bug description:
  Binary package hint: dbus

  happens on start up

  ProblemType: Crash
  Architecture: i386
  CrashCounter: 1
  Date: Thu Jul 26 20:15:24 2007
  DistroRelease: Ubuntu 7.10
  ExecutablePath: /usr/bin/dbus-daemon
  Package: dbus 1.1.1-3ubuntu1
  PackageArchitecture: i386
  ProcCmdline: dbus-daemon --fork --print-address 18 --print-pid 20 --session
  ProcCwd: /
  ProcEnviron:
   PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games
   LANG=en_GB.UTF-8
   SHELL=/bin/bash
  Signal: 11
  SourcePackage: dbus
  StacktraceTop:
   strcmp () from /lib/tls/i686/cmov/libc.so.6
   ?? ()
   ?? ()
   ?? ()
   ?? ()
  Title: dbus-daemon crashed with SIGSEGV in strcmp()
  Uname: Linux dave-laptop 2.6.22-8-generic #1 SMP Thu Jul 12 15:59:45 GMT 2007 i686 GNU/Linux
  UserGroups: adm admin audio cdrom dialout dip fax floppy fuse lpadmin netdev plugdev powerdev scanner tape video

To manage notifications about this bug go to:
https://bugs.launchpad.net/dbus/+bug/128624/+subscriptions