[Bug 1532314] Re: Buffer overflow in cgmanager

Shimin shimin at databricks.com
Mon Jan 11 18:47:07 UTC 2016 

Yes I was able to hit 1024 open fd's.

On Mon, Jan 11, 2016 at 9:18 AM, Serge Hallyn <1532314 at bugs.launchpad.net>
wrote:

> Can you show 'ls /proc/$(pidof cgmanager)/fd' at a few times?
>
> This is something we've run into with normal operation in go, but since
> cgmanager is not threaded it should not have so many open fds.
>
> --
> You received this bug notification because you are subscribed to the bug
> report.
> https://bugs.launchpad.net/bugs/1532314
>
> Title:
>   Buffer overflow in cgmanager
>
> Status in lxc package in Ubuntu:
>   Incomplete
>
> Bug description:
>   Host: Ubuntu 15.10
>   lxc: 1.1.5-0ubuntu0.15.10.3
>   cgmanager: 0.39-2ubuntu2
>   Container: Ubuntu 15.10
>
>   Got the following trace in syslog. Please let me know what other
>   information will be useful for troubleshooting.
>
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]: *** buffer overflow
> detected ***: /sbin/cgmanager terminated
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]: ======= Backtrace:
> =========
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]:
> /lib/x86_64-linux-gnu/libc.so.6(+0x78c4e)[0x7f1929550c4e]
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]:
> /lib/x86_64-linux-gnu/libc.so.6(__fortify_fail+0x5c)[0x7f19295f0e8c]
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]:
> /lib/x86_64-linux-gnu/libc.so.6(+0x116e80)[0x7f19295eee80]
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]:
> /lib/x86_64-linux-gnu/libc.so.6(+0x118dd7)[0x7f19295f0dd7]
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]:
> /lib/x86_64-linux-gnu/libnih.so.1(nih_io_handle_fds+0xad)[0x7f1929d01b3d]
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]:
> /lib/x86_64-linux-gnu/libnih.so.1(nih_main_loop+0x13f)[0x7f1929d05faf]
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]:
> /sbin/cgmanager(+0x5145)[0x562d8fc75145]
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]:
> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf0)[0x7f19294f8a40]
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]:
> /sbin/cgmanager(+0x53d9)[0x562d8fc753d9]
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]: ======= Memory map:
> ========
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]:
> 562d8fc70000-562d8fc92000 r-xp 00000000 ca:01 12884
> /sbin/cgmanager
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]:
> 562d8fe92000-562d8fe94000 r--p 00022000 ca:01 12884
> /sbin/cgmanager
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]:
> 562d8fe94000-562d8fe95000 rw-p 00024000 ca:01 12884
> /sbin/cgmanager
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]:
> 562d915f8000-562d92030000 rw-p 00000000 00:00 0
> [heap]
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]:
> 7f1927d44000-7f1927d5a000 r-xp 00000000 ca:01 395872
>  /lib/x86_64-linux-gnu/libgcc_s.so.1
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]:
> 7f1927d5a000-7f1927f59000 ---p 00016000 ca:01 395872
>  /lib/x86_64-linux-gnu/libgcc_s.so.1
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]:
> 7f1927f59000-7f1927f5a000 r--p 00015000 ca:01 395872
>  /lib/x86_64-linux-gnu/libgcc_s.so.1
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]:
> 7f1927f5a000-7f1927f5b000 rw-p 00016000 ca:01 395872
>  /lib/x86_64-linux-gnu/libgcc_s.so.1
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]:
> 7f1927f5b000-7f1927f67000 r-xp 00000000 ca:01 403839
>  /lib/x86_64-linux-gnu/libnss_files-2.21.so
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]:
> 7f1927f67000-7f1928166000 ---p 0000c000 ca:01 403839
>  /lib/x86_64-linux-gnu/libnss_files-2.21.so
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]:
> 7f1928166000-7f1928167000 r--p 0000b000 ca:01 403839
>  /lib/x86_64-linux-gnu/libnss_files-2.21.so
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]:
> 7f1928167000-7f1928168000 rw-p 0000c000 ca:01 403839
>  /lib/x86_64-linux-gnu/libnss_files-2.21.so
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]:
> 7f1928168000-7f1928173000 r-xp 00000000 ca:01 403823
>  /lib/x86_64-linux-gnu/libnss_nis-2.21.so
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]:
> 7f1928173000-7f1928372000 ---p 0000b000 ca:01 403823
>  /lib/x86_64-linux-gnu/libnss_nis-2.21.so
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]:
> 7f1928372000-7f1928373000 r--p 0000a000 ca:01 403823
>  /lib/x86_64-linux-gnu/libnss_nis-2.21.so
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]:
> 7f1928373000-7f1928374000 rw-p 0000b000 ca:01 403823
>  /lib/x86_64-linux-gnu/libnss_nis-2.21.so
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]:
> 7f1928374000-7f192838b000 r-xp 00000000 ca:01 403845
>  /lib/x86_64-linux-gnu/libnsl-2.21.so
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]:
> 7f192838b000-7f192858a000 ---p 00017000 ca:01 403845
>  /lib/x86_64-linux-gnu/libnsl-2.21.so
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]:
> 7f192858a000-7f192858b000 r--p 00016000 ca:01 403845
>  /lib/x86_64-linux-gnu/libnsl-2.21.so
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]:
> 7f192858b000-7f192858c000 rw-p 00017000 ca:01 403845
>  /lib/x86_64-linux-gnu/libnsl-2.21.so
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]:
> 7f192858c000-7f192858e000 rw-p 00000000 00:00 0
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]:
> 7f192858e000-7f1928596000 r-xp 00000000 ca:01 403841
>  /lib/x86_64-linux-gnu/libnss_compat-2.21.so
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]:
> 7f1928596000-7f1928795000 ---p 00008000 ca:01 403841
>  /lib/x86_64-linux-gnu/libnss_compat-2.21.so
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]:
> 7f1928795000-7f1928796000 r--p 00007000 ca:01 403841
>  /lib/x86_64-linux-gnu/libnss_compat-2.21.so
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]:
> 7f1928796000-7f1928797000 rw-p 00008000 ca:01 403841
>  /lib/x86_64-linux-gnu/libnss_compat-2.21.so
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]:
> 7f1928797000-7f19287a9000 r-xp 00000000 ca:01 394903
>  /lib/x86_64-linux-gnu/libgpg-error.so.0.15.0
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]:
> 7f19287a9000-7f19289a8000 ---p 00012000 ca:01 394903
>  /lib/x86_64-linux-gnu/libgpg-error.so.0.15.0
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]:
> 7f19289a8000-7f19289a9000 r--p 00011000 ca:01 394903
>  /lib/x86_64-linux-gnu/libgpg-error.so.0.15.0
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]:
> 7f19289a9000-7f19289aa000 rw-p 00012000 ca:01 394903
>  /lib/x86_64-linux-gnu/libgpg-error.so.0.15.0
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]:
> 7f19289aa000-7f19289ad000 r-xp 00000000 ca:01 403830
>  /lib/x86_64-linux-gnu/libdl-2.21.so
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]:
> 7f19289ad000-7f1928bac000 ---p 00003000 ca:01 403830
>  /lib/x86_64-linux-gnu/libdl-2.21.so
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]:
> 7f1928bac000-7f1928bad000 r--p 00002000 ca:01 403830
>  /lib/x86_64-linux-gnu/libdl-2.21.so
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]:
> 7f1928bad000-7f1928bae000 rw-p 00003000 ca:01 403830
>  /lib/x86_64-linux-gnu/libdl-2.21.so
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]:
> 7f1928bae000-7f1928c86000 r-xp 00000000 ca:01 394902
>  /lib/x86_64-linux-gnu/libgcrypt.so.20.0.3
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]:
> 7f1928c86000-7f1928e86000 ---p 000d8000 ca:01 394902
>  /lib/x86_64-linux-gnu/libgcrypt.so.20.0.3
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]:
> 7f1928e86000-7f1928e87000 r--p 000d8000 ca:01 394902
>  /lib/x86_64-linux-gnu/libgcrypt.so.20.0.3
>   Jan  8 19:29:24 ip-10-169-249-164 cgmanager[7725]:
> 7f1928e87000-7f1928e90000 rw-p 000d9000 ca:01 394902
>  /lib/x86_64-linux-gnu/libgcrypt.so.20.0.3
>   [snip]
>   Jan  8 19:29:24 ip-10-169-249-164 systemd[1]: cgmanager.service: Main
> process exited, code=dumped, status=6/ABRT
>   Jan  8 19:29:24 ip-10-169-249-164 systemd[1]: cgmanager.service: Unit
> entered failed state.
>   Jan  8 19:29:24 ip-10-169-249-164 systemd[1]: cgmanager.service: Failed
> with result 'core-dump'.
>
> To manage notifications about this bug go to:
> https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1532314/+subscriptions
>

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to lxc in Ubuntu.
https://bugs.launchpad.net/bugs/1532314

Title:
  Buffer overflow in cgmanager

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1532314/+subscriptions

More information about the Ubuntu-server-bugs mailing list