[Bug 1173090] Re: Buffer overflow in ZSNES since update to raring

Marc Deslauriers marc.deslauriers at canonical.com
Wed Jun 19 14:33:01 UTC 2013


Uploaded to raring for processing by the SRU team.
Thanks!

** Also affects: zsnes (Ubuntu Raring)
   Importance: Undecided
       Status: New

** Also affects: zsnes (Ubuntu Saucy)
   Importance: Undecided
       Status: Confirmed

** Changed in: zsnes (Ubuntu Raring)
       Status: New => Confirmed

** Description changed:

+ [impact]
+ zsnes in raring is unusable as it segfaults immediately when a game is loaded.
+ 
+ [test case]
+ 1- Start zsnes
+ 2- Load a game rom
+ 3- See if segfault occurs
+ 
+ [Regression potential]
+ This affects the state loading code, so a regression could break state loading, although it's unlikely.
+ 
+ ---------------
+ 
+ 
  After updating from quantal to raring (amd64 install), zsnes crashes when trying to load a game.
  The problem started with zsnes 1.510+bz2-5ubuntu2: i386 (raring).
- It is solved by rolling back to the old version zsnes 1.510-2.2ubuntu5: i386 (quantal). 
+ It is solved by rolling back to the old version zsnes 1.510-2.2ubuntu5: i386 (quantal).
  
  Here is what exactly happens with zsnes 1.510+bz2-5ubuntu2: i386
  (raring):
  
  stephane at nausicaa:~$ zsnes
  ZSNES v1.51, (c) 1997-2007, ZSNES Team
  Be sure to check http://www.zsnes.com/ for the latest version.
  
  ZSNES is written by the ZSNES Team (See AUTHORS.TXT)
  ZSNES comes with ABSOLUTELY NO WARRANTY.  This is free software,
  and you are welcome to redistribute it under certain conditions;
  please read 'LICENSE.TXT' thoroughly before doing so.
  
  Use ZSNES -? for command line definitions.
  
  Starting Mouse detection.
  Unable to poll /dev/input/event12. Make sure you have read permissions to it.
  Unable to poll /dev/input/event11. Make sure you have read permissions to it.
  Unable to poll /dev/input/event10. Make sure you have read permissions to it.
  Unable to poll /dev/input/event9. Make sure you have read permissions to it.
  Unable to poll /dev/input/event8. Make sure you have read permissions to it.
  Unable to poll /dev/input/event7. Make sure you have read permissions to it.
  Unable to poll /dev/input/event6. Make sure you have read permissions to it.
  Unable to poll /dev/input/event5. Make sure you have read permissions to it.
  Unable to poll /dev/input/event4. Make sure you have read permissions to it.
  Unable to poll /dev/input/event3. Make sure you have read permissions to it.
  Unable to poll /dev/input/event2. Make sure you have read permissions to it.
  Unable to poll /dev/input/event1. Make sure you have read permissions to it.
  Unable to poll /dev/input/event0. Make sure you have read permissions to it.
  ManyMouse: 0 mice detected.
  
  Audio Opened.
  Driver: Simple DirectMedia Layer output
  Channels: 2
  Rate: 44100
  
  ZSNES could not find any joysticks.
  *** buffer overflow detected ***: zsnes terminated
  ======= Backtrace: =========
  /lib/i386-linux-gnu/libc.so.6(__fortify_fail+0x63)[0xf732cbc3]
  /lib/i386-linux-gnu/libc.so.6(+0x10593a)[0xf732b93a]
  zsnes[0x807e5a5]
  zsnes[0x8103133]
- ======= Memory map: ========
- 08048000-0831c000 r-xp 00000000 08:03 1443242                            /usr/bin/zsnes
- 0831c000-0831d000 r--p 002d3000 08:03 1443242                            /usr/bin/zsnes
- 0831d000-0835c000 rw-p 002d4000 08:03 1443242                            /usr/bin/zsnes
- 0835c000-08911000 rw-p 00000000 00:00 0 
- 0a49d000-0a6c6000 rw-p 00000000 00:00 0                                  [heap]
- ed9e6000-edc00000 rw-p 00000000 00:00 0 
- edc00000-edc21000 rw-p 00000000 00:00 0 
- edc21000-edd00000 ---p 00000000 00:00 0 
- eddff000-ede00000 ---p 00000000 00:00 0 
- ede00000-ee600000 rw-p 00000000 00:00 0                                  [stack:8598]
- ee600000-ee621000 rw-p 00000000 00:00 0 
- ee621000-ee700000 ---p 00000000 00:00 0 
- ee7e9000-ee7ea000 ---p 00000000 00:00 0 
- ee7ea000-eefea000 rw-p 00000000 00:00 0                                  [stack:8597]
- eefea000-f2feb000 rw-s 00000000 00:15 32978                              /run/shm/pulse-shm-733255308
- f2feb000-f306c000 rw-p 00000000 00:00 0 
- f306c000-f326c000 rw-s 1a28b9000 00:05 13728                             /dev/nvidia0
- f326c000-f336c000 rw-s 18902a000 00:05 13728                             /dev/nvidia0
- f336c000-f33ac000 rw-s 154d20000 00:05 13728                             /dev/nvidia0
- f33cc000-f351f000 rw-p 00000000 00:00 0 
- f351f000-f3576000 rw-p 00000000 00:00 0 
- f3578000-f357f000 r--s 00000000 08:03 1459023                            /usr/lib/i386-linux-gnu/gconv/gconv-modules.cache
- f357f000-f3600000 rw-p 00000000 00:00 0 
- f3600000-f3800000 r--p 00000000 08:03 1442063                            /usr/lib/locale/locale-archive
- f3800000-f3821000 rw-p 00000000 00:00 0 
- f3821000-f3900000 ---p 00000000 00:00 0 
- f3903000-f3906000 rw-p 00000000 00:00 0 
- f3906000-f3908000 rw-s 00000000 00:13 34136                              /tmp/glNvt4Uw (deleted)
- f3908000-f390a000 r-xs 00000000 00:13 34136                              /tmp/glNvt4Uw (deleted)
- f390a000-f390f000 r-xp 00000000 08:03 1445830                            /usr/lib/i386-linux-gnu/libXfixes.so.3.1.0
- f390f000-f3910000 r--p 00004000 08:03 1445830                            /usr/lib/i386-linux-gnu/libXfixes.so.3.1.0
- f3910000-f3911000 rw-p 00005000 08:03 1445830                            /usr/lib/i386-linux-gnu/libXfixes.so.3.1.0
- f3911000-f3919000 r-xp 00000000 08:03 1446787                            /usr/lib/i386-linux-gnu/libXrender.so.1.3.0
- f3919000-f391a000 r--p 00007000 08:03 1446787                            /usr/lib/i386-linux-gnu/libXrender.so.1.3.0
- f391a000-f391b000 rw-p 00008000 08:03 1446787                            /usr/lib/i386-linux-gnu/libXrender.so.1.3.0
- f391b000-f3924000 r-xp 00000000 08:03 1445411                            /usr/lib/i386-linux-gnu/libXcursor.so.1.0.2
- f3924000-f3925000 r--p 00008000 08:03 1445411                            /usr/lib/i386-linux-gnu/libXcursor.so.1.0.2
- f3925000-f3926000 rw-p 00009000 08:03 1445411                            /usr/lib/i386-linux-gnu/libXcursor.so.1.0.2
- f3926000-f392a000 rw-s 197f28000 00:05 13728                             /dev/nvidia0
- f392a000-f392e000 rw-s 1a7fc9000 00:05 13728                             /dev/nvidia0
- f392e000-f394b000 rw-s 206112000 00:05 13728                             /dev/nvidia0
- f394b000-f394c000 ---p 00000000 00:00 0 
- f394c000-f4c7b000 rw-p 00000000 00:00 0                                  [stack:8595]
- f4c7b000-f4c86000 r-xp 00000000 08:03 1576487                            /lib/i386-linux-gnu/libnss_files-2.17.so
- f4c86000-f4c87000 r--p 0000a000 08:03 1576487                            /lib/i386-linux-gnu/libnss_files-2.17.so
- f4c87000-f4c88000 rw-p 0000b000 08:03 1576487                            /lib/i386-linux-gnu/libnss_files-2.17.so
- f4c88000-f4c89000 rw-s e0002000 00:05 13728                              /dev/nvidia0
- f4c89000-f4c8a000 rw-s 20e2c9000 00:05 13728                             /dev/nvidia0
- f4c8a000-f4c8b000 rw-s f6c06000 00:05 13728                              /dev/nvidia0
- f4c8b000-f4c8c000 rw-s f6641000 00:05 13728                              /dev/nvidia0
- f4c8c000-f4c8d000 rw-s 20ea3a000 00:05 13728                             /dev/nvidia0
- f4c8d000-f4c8e000 rw-s 154fac000 00:05 13728                             /dev/nvidia0
- f4c8e000-f4c94000 rw-p 00000000 00:00 0 
- f4c94000-f4c95000 rw-s f6060000 00:05 13728                              /dev/nvidia0
- f4c95000-f4cb1000 rw-p 00000000 00:00 0 
- f4cb1000-f4cc4000 r-xp 00000000 08:03 1577583                            /lib/i386-linux-gnu/libresolv-2.17.so
- f4cc4000-f4cc5000 r--p 00013000 08:03 1577583                            /lib/i386-linux-gnu/libresolv-2.17.so
- f4cc5000-f4cc6000 rw-p 00014000 08:03 1577583                            /lib/i386-linux-gnu/libresolv-2.17.so
- f4cc6000-f4cc8000 rw-p 00000000 00:00 0 
- f4cc8000-f4cce000 r-xp 00000000 08:03 1449721                            /usr/lib/i386-linux-gnu/libogg.so.0.8.0
- f4cce000-f4ccf000 r--p 00005000 08:03 1449721                            /usr/lib/i386-linux-gnu/libogg.so.0.8.0
- f4ccf000-f4cd0000 rw-p 00006000 08:03 1449721                            /usr/lib/i386-linux-gnu/libogg.so.0.8.0
- f4cd0000-f4cd1000 rw-p 00000000 00:00 0 
- f4cd1000-f4cfa000 r-xp 00000000 08:03 1450092                            /usr/lib/i386-linux-gnu/libvorbis.so.0.4.5
- f4cfa000-f4cfb000 ---p 00029000 08:03 1450092                            /usr/lib/i386-linux-gnu/libvorbis.so.0.4.5
- f4cfb000-f4cfc000 r--p 00029000 08:03 1450092                            /usr/lib/i386-linux-gnu/libvorbis.so.0.4.5
- f4cfc000-f4cfd000 rw-p 0002a000 08:03 1450092                            /usr/lib/i386-linux-gnu/libvorbis.so.0.4.5
- f4cfd000-f4e63000 r-xp 00000000 08:03 1450088                            /usr/lib/i386-linux-gnu/libvorbisenc.so.2.0.8
- f4e63000-f4e74000 r--p 00165000 08:03 1450088                            /usr/lib/i386-linux-gnu/libvorbisenc.so.2.0.8
- f4e74000-f4e75000 rw-p 00176000 08:03 1450088                            /usr/lib/i386-linux-gnu/libvorbisenc.so.2.0.8
- f4e75000-f4ec3000 r-xp 00000000 08:03 1453826                            /usr/lib/i386-linux-gnu/libFLAC.so.8.2.0
- f4ec3000-f4ec4000 r--p 0004e000 08:03 1453826                            /usr/lib/i386-linux-gnu/libFLAC.so.8.2.0
- f4ec4000-f4ec5000 rw-p 0004f000 08:03 1453826                            /usr/lib/i386-linux-gnu/libFLAC.so.8.2.0
- f4ec5000-f4eda000 r-xp 00000000 08:03 1577590                            /lib/i386-linux-gnu/libnsl-2.17.so
- f4eda000-f4edb000 r--p 00014000 08:03 1577590                            /lib/i386-linux-gnu/libnsl-2.17.so
- f4edb000-f4edc000 rw-p 00015000 08:03 1577590                            /lib/i386-linux-gnu/libnsl-2.17.so
- f4edc000-f4ede000 rw-p 00000000 00:00 0 
- f4ede000-f4ee3000 r-xp 00000000 08:03 1446727                            /usr/lib/i386-linux-gnu/libXdmcp.so.6.0.0
- f4ee3000-f4ee4000 r--p 00004000 08:03 1446727                            /usr/lib/i386-linux-gnu/libXdmcp.so.6.0.0
- f4ee4000-f4ee5000 rw-p 00005000 08:03 1446727                            /usr/lib/i386-linux-gnu/libXdmcp.so.6.0.0
- f4ee5000-f4ee6000 rw-p 00000000 00:00 0 
- f4ee6000-f4ee8000 r-xp 00000000 08:03 1446690                            /usr/lib/i386-linux-gnu/libXau.so.6.0.0
- f4ee8000-f4ee9000 r--p 00001000 08:03 1446690                            /usr/lib/i386-linux-gnu/libXau.so.6.0.0
- f4ee9000-f4eea000 rw-p 00002000 08:03 1446690                            /usr/lib/i386-linux-gnu/libXau.so.6.0.0
- f4eea000-f4eef000 r-xp 00000000 08:03 1444265                            /usr/lib/i386-linux-gnu/libasyncns.so.0.3.1
- f4eef000-f4ef0000 r--p 00004000 08:03 1444265                            /usr/lib/i386-linux-gnu/libasyncns.so.0.3.1
- f4ef0000-f4ef1000 rw-p 00005000 08:03 1444265                            /usr/lib/i386-linux-gnu/libasyncns.so.0.3.1
- f4ef1000-f4f5e000 r-xp 00000000 08:03 1450041                            /usr/lib/i386-linux-gnu/libsndfile.so.1.0.25
- f4f5e000-f4f60000 r--p 0006c000 08:03 1450041                            /usr/lib/i386-linux-gnu/libsndfile.so.1.0.25
- f4f60000-f4f61000 rw-p 0006e000 08:03 1450041                            /usr/lib/i386-linux-gnu/libsndfile.so.1.0.25
- f4f61000-f4f65000 rw-p 00000000 00:00 0 
- f4f65000-f4f6d000 r-xp 00000000 08:03 1576646                            /lib/i386-linux-gnu/libwrap.so.0.7.6
- f4f6d000-f4f6e000 r--p 00007000 08:03 1576646                            /lib/i386-linux-gnu/libwrap.so.0.7.6
- f4f6e000-f4f6f000 rw-p 00008000 08:03 1576646                            /lib/i386-linux-gnu/libwrap.so.0.7.6
- f4f6f000-f4f9e000 r-xp 00000000 08:03 1575116                            /lib/i386-linux-gnu/libncursesw.so.5.9
- f4f9e000-f4f9f000 r--p 0002e000 08:03 1575116                            /lib/i386-linux-gnu/libncursesw.so.5.9
- f4f9f000-f4fa0000 rw-p 0002f000 08:03 1575116                            /lib/i386-linux-gnu/libncursesw.so.5.9
- f4fa0000-f4fa1000 rw-p 00000000 00:00 0 
- f4fa1000-f5085000 r-xp 00000000 08:03 1575412                            /lib/i386-linux-gnu/libslang.so.2.2.4
- f5085000-f5087000 r--p 000e3000 08:03 1575412                            /lib/i386-linux-gnu/libslang.so.2.2.4
- f5087000-f5095000 rw-p 000e5000 08:03 1575412                            /lib/i386-linux-gnu/libslang.so.2.2.4
- f5095000-f50d0000 rw-p 00000000 00:00 0 
- f50d0000-f50f0000 r-xp 00000000 08:03 1446749                            /usr/lib/i386-linux-gnu/libxcb.so.1.1.0
- f50f0000-f50f1000 r--p 0001f000 08:03 1446749                            /usr/lib/i386-linux-gnu/libxcb.so.1.1.0
- f50f1000-f50f2000 rw-p 00020000 08:03 1446749                            /usr/lib/i386-linux-gnu/libxcb.so.1.1.0
- f50f2000-f513a000 r-xp 00000000 08:03 1572941                            /lib/i386-linux-gnu/libdbus-1.so.3.7.2
- f513a000-f513b000 r--p 00047000 08:03 1572941                            /lib/i386-linux-gnu/libdbus-1.so.3.7.2
- f513b000-f513c000 rw-p 00048000 08:03 1572941                            /lib/i386-linux-gnu/libdbus-1.so.3.7.2
- f513c000-f5144000 r-xp 00000000 08:03 1575632                            /lib/i386-linux-gnu/libjson.so.0.1.0
- f5144000-f5145000 r--p 00007000 08:03 1575632                            /lib/i386-linux-gnu/libjson.so.0.1.0
- f5145000-f5146000 rw-p 00008000 08:03 1575632                            /lib/i386-linux-gnu/libjson.so.0.1.0
- f5146000-f51af000 r-xp 00000000 08:03 1447617                            /usr/lib/i386-linux-gnu/pulseaudio/libpulsecommon-3.0.so
- f51af000-f51b0000 r--p 00068000 08:03 1447617                            /usr/lib/i386-linux-gnu/pulseaudio/libpulsecommon-3.0.so
- f51b0000-f51b1000 rw-p 00069000 08:03 1447617                            /usr/lib/i386-linux-gnu/pulseaudio/libpulsecommon-3.0.so
- f51b1000-f51b2000 rw-p 00000000 00:00 0 
- f51b2000-f51b9000 r-xp 00000000 08:03 1575511                            /lib/i386-linux-gnu/librt-2.17.so
- f51b9000-f51ba000 r--p 00006000 08:03 1575511                            /lib/i386-linux-gnu/librt-2.17.so
- f51ba000-f51bb000 rw-p 00007000 08:03 1575511                            /lib/i386-linux-gnu/librt-2.17.so
- f51bb000-f6e49000 r-xp 00000000 08:03 1705408                            /usr/lib32/nvidia-304/libnvidia-glcore.so.304.88
- f6e49000-f6eae000 rwxp 01c8d000 08:03 1705408                            /usr/lib32/nvidia-304/libnvidia-glcore.so.304.88
- f6eae000-f6ec1000 rwxp 00000000 00:00 0 
- f6ec1000-f6ec4000 r-xp 00000000 08:03 1704230                            /usr/lib32/nvidia-304/tls/libnvidia-tls.so.304.88
- f6ec4000-f6ec5000 rw-p 00002000 08:03 1704230                            /usr/lib32/nvidia-304/tls/libnvidia-tls.so.304.88
- f6ec5000-f6f8b000 r-xp 00000000 08:03 1449163                            /usr/lib/i386-linux-gnu/libcaca.so.0.99.18
- f6f8b000-f6f8c000 r--p 000c5000 08:03 1449163                            /usr/lib/i386-linux-gnu/libcaca.so.0.99.18
- f6f8c000-f6f8d000 rw-p 000c6000 08:03 1449163                            /usr/lib/i386-linux-gnu/libcaca.so.0.99.18
- f6f8d000-f6f92000 rw-p 00000000 00:00 0 
- f6f92000-f6fa2000 r-xp 00000000 08:03 1449636                            /usr/lib/i386-linux-gnu/libXext.so.6.4.0
- f6fa2000-f6fa3000 r--p 0000f000 08:03 1449636                            /usr/lib/i386-linux-gnu/libXext.so.6.4.0
- f6fa3000-f6fa4000 rw-p 00010000 08:03 1449636                            /usr/lib/i386-linux-gnu/libXext.so.6.4.0
- f6fa4000-f70d6000 r-xp 00000000 08:03 1446761                            /usr/lib/i386-linux-gnu/libX11.so.6.3.0
- f70d6000-f70d7000 r--p 00132000 08:03 1446761                            /usr/lib/i386-linux-gnu/libX11.so.6.3.0
- f70d7000-f70da000 rw-p 00133000 08:03 1446761                            /usr/lib/i386-linux-gnu/libX11.so.6.3.0
- f70da000-f7126000 r-xp 00000000 08:03 1447616                            /usr/lib/i386-linux-gnu/libpulse.so.0.15.3
- f7126000-f7127000 ---p 0004c000 08:03 1447616                            /usr/lib/i386-linux-gnu/libpulse.so.0.15.3
- f7127000-f7128000 r--p 0004c000 08:03 1447616                            /usr/lib/i386-linux-gnu/libpulse.so.0.15.3
- f7128000-f7129000 rw-p 0004d000 08:03 1447616                            /usr/lib/i386-linux-gnu/libpulse.so.0.15.3
- f7129000-f712c000 r-xp 00000000 08:03 1447613                            /usr/lib/i386-linux-gnu/libpulse-simple.so.0.0.3
- f712c000-f712d000 r--p 00002000 08:03 1447613                            /usr/lib/i386-linux-gnu/libpulse-simple.so.0.0.3
- f712d000-f712e000 rw-p 00003000 08:03 1447613                            /usr/lib/i386-linux-gnu/libpulse-simple.so.0.0.3
- f712e000-f7131000 r-xp 00000000 08:03 1577580                            /lib/i386-linux-gnu/libdl-2.17.so
- f7131000-f7132000 r--p 00002000 08:03 1577580                            /lib/i386-linux-gnu/libdl-2.17.so
- f7132000-f7133000 rw-p 00003000 08:03 1577580                            /lib/i386-linux-gnu/libdl-2.17.so
- f7133000-f7134000 rw-p 00000000 00:00 0 
- f7134000-f7221000 r-xp 00000000 08:03 1444592                            /usr/lib/i386-linux-gnu/libasound.so.2.0.0
- f7221000-f7225000 r--p 000ec000 08:03 1444592                            /usr/lib/i386-linux-gnu/libasound.so.2.0.0
- f7225000-f7226000 rw-p 000f0000 08:03 1444592                            /usr/lib/i386-linux-gnu/libasound.so.2.0.0
- f7226000-f73d3000 r-xp 00000000 08:03 1576663                            /lib/i386-linux-gnu/libc-2.17.so
- f73d3000-f73d5000 r--p 001ad000 08:03 1576663                            /lib/i386-linux-gnu/libc-2.17.so
- f73d5000-f73d6000 rw-p 001af000 08:03 1576663                            /lib/i386-linux-gnu/libc-2.17.so
- f73d6000-f73d9000 rw-p 00000000 00:00 0 
- f73d9000-f73f4000 r-xp 00000000 08:03 1575535                            /lib/i386-linux-gnu/libgcc_s.so.1
- f73f4000-f73f5000 r--p 0001a000 08:03 1575535                            /lib/i386-linux-gnu/libgcc_s.so.1
- f73f5000-f73f6000 rw-p 0001b000 08:03 1575535                            /lib/i386-linux-gnu/libgcc_s.so.1
- f73f6000-f7437000 r-xp 00000000 08:03 1576485                            /lib/i386-linux-gnu/libm-2.17.so
- f7437000-f7438000 r--p 00040000 08:03 1576485                            /lib/i386-linux-gnu/libm-2.17.so
- f7438000-f7439000 rw-p 00041000 08:03 1576485                            /lib/i386-linux-gnu/libm-2.17.so
- f7439000-f7515000 r-xp 00000000 08:03 1442109                            /usr/lib/i386-linux-gnu/libstdc++.so.6.0.17
- f7515000-f7516000 ---p 000dc000 08:03 1442109                            /usr/lib/i386-linux-gnu/libstdc++.so.6.0.17
- f7516000-f751a000 r--p 000dc000 08:03 1442109                            /usr/lib/i386-linux-gnu/libstdc++.so.6.0.17
- f751a000-f751b000 rw-p 000e0000 08:03 1442109                            /usr/lib/i386-linux-gnu/libstdc++.so.6.0.17
- f751b000-f7523000 rw-p 00000000 00:00 0 
- f7523000-f75d0000 r-xp 00000000 08:03 1705570                            /usr/lib32/nvidia-304/libGL.so.304.88
- f75d0000-f75f0000 rwxp 000ac000 08:03 1705570                            /usr/lib32/nvidia-304/libGL.so.304.88
- f75f0000-f75ff000 rwxp 00000000 00:00 0 
- f75ff000-f761b000 r-xp 00000000 08:03 1575118                            /lib/i386-linux-gnu/libtinfo.so.5.9
- f761b000-f761d000 r--p 0001b000 08:03 1575118                            /lib/i386-linux-gnu/libtinfo.so.5.9
- f761d000-f761e000 rw-p 0001d000 08:03 1575118                            /lib/i386-linux-gnu/libtinfo.so.5.9
- f761e000-f763e000 r-xp 00000000 08:03 1575122                            /lib/i386-linux-gnu/libncurses.so.5.9
- f763e000-f763f000 r--p 0001f000 08:03 1575122                            /lib/i386-linux-gnu/libncurses.so.5.9
- f763f000-f7640000 rw-p 00020000 08:03 1575122                            /lib/i386-linux-gnu/libncurses.so.5.9
- f7640000-f7667000 r-xp 00000000 08:03 1573776                            /lib/i386-linux-gnu/libpng12.so.0.49.0
- f7667000-f7668000 r--p 00026000 08:03 1573776                            /lib/i386-linux-gnu/libpng12.so.0.49.0
- f7668000-f7669000 rw-p 00027000 08:03 1573776                            /lib/i386-linux-gnu/libpng12.so.0.49.0
- f7669000-f76d5000 r-xp 00000000 08:03 1449241                            /usr/lib/i386-linux-gnu/libSDL-1.2.so.0.11.4
- f76d5000-f76d6000 ---p 0006c000 08:03 1449241                            /usr/lib/i386-linux-gnu/libSDL-1.2.so.0.11.4
- f76d6000-f76d7000 r--p 0006c000 08:03 1449241                            /usr/lib/i386-linux-gnu/libSDL-1.2.so.0.11.4
- f76d7000-f76d8000 rw-p 0006d000 08:03 1449241                            /usr/lib/i386-linux-gnu/libSDL-1.2.so.0.11.4
- f76d8000-f7703000 rw-p 00000000 00:00 0 
- f7703000-f771a000 r-xp 00000000 08:03 1584785                            /lib/i386-linux-gnu/libz.so.1.2.7
- f771a000-f771b000 r--p 00016000 08:03 1584785                            /lib/i386-linux-gnu/libz.so.1.2.7
- f771b000-f771c000 rw-p 00017000 08:03 1584785                            /lib/i386-linux-gnu/libz.so.1.2.7
- f771c000-f7733000 r-xp 00000000 08:03 1577572                            /lib/i386-linux-gnu/libpthread-2.17.so
- f7733000-f7734000 r--p 00016000 08:03 1577572                            /lib/i386-linux-gnu/libpthread-2.17.so
- f7734000-f7735000 rw-p 00017000 08:03 1577572                            /lib/i386-linux-gnu/libpthread-2.17.so
- f7735000-f7737000 rw-p 00000000 00:00 0 
- f7737000-f7738000 r--p 002cc000 08:03 1442063                            /usr/lib/locale/locale-archive
- f7738000-f773f000 rw-p 00000000 00:00 0 
- f773f000-f7749000 r-xp 00000000 08:03 1577574                            /lib/i386-linux-gnu/libnss_nis-2.17.so
- f7749000-f774a000 r--p 00009000 08:03 1577574                            /lib/i386-linux-gnu/libnss_nis-2.17.so
- f774a000-f774b000 rw-p 0000a000 08:03 1577574                            /lib/i386-linux-gnu/libnss_nis-2.17.so
- f774b000-f7752000 r-xp 00000000 08:03 1575585                            /lib/i386-linux-gnu/libnss_compat-2.17.so
- f7752000-f7753000 r--p 00006000 08:03 1575585                            /lib/i386-linux-gnu/libnss_compat-2.17.so
- f7753000-f7754000 rw-p 00007000 08:03 1575585                            /lib/i386-linux-gnu/libnss_compat-2.17.so
- f7754000-f775e000 rw-p 00000000 00:00 0 
- f775e000-f775f000 r-xp 00000000 00:00 0                                  [vdso]
- f775f000-f776e000 r-xp 00000000 08:03 1577588                            /lib/i386-linux-gnu/ld-2.17.so
- f776e000-f776f000 r-xp 0000f000 08:03 1577588                            /lib/i386-linux-gnu/ld-2.17.so
- f776f000-f777f000 r-xp 00010000 08:03 1577588                            /lib/i386-linux-gnu/ld-2.17.so
- f777f000-f7780000 r--p 0001f000 08:03 1577588                            /lib/i386-linux-gnu/ld-2.17.so
- f7780000-f7781000 rw-p 00020000 08:03 1577588                            /lib/i386-linux-gnu/ld-2.17.so
- ff94d000-ff993000 rw-p 00000000 00:00 0                                  [stack]
- Abandon (core dumped)

-- 
You received this bug notification because you are a member of Ubuntu
Sponsors Team, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1173090

Title:
  Buffer overflow in ZSNES since update to raring

Status in “zsnes” package in Ubuntu:
  Confirmed
Status in “zsnes” source package in Raring:
  Confirmed
Status in “zsnes” source package in Saucy:
  Confirmed

Bug description:
  [impact]
  zsnes in raring is unusable as it segfaults immediately when a game is loaded.

  [test case]
  1- Start zsnes
  2- Load a game rom
  3- See if segfault occurs

  [Regression potential]
  This affects the state loading code, so a regression could break state loading, although it's unlikely.

  ---------------

  
  After updating from quantal to raring (amd64 install), zsnes crashes when trying to load a game.
  The problem started with zsnes 1.510+bz2-5ubuntu2: i386 (raring).
  It is solved by rolling back to the old version zsnes 1.510-2.2ubuntu5: i386 (quantal).

  Here is what exactly happens with zsnes 1.510+bz2-5ubuntu2: i386
  (raring):

  stephane at nausicaa:~$ zsnes
  ZSNES v1.51, (c) 1997-2007, ZSNES Team
  Be sure to check http://www.zsnes.com/ for the latest version.

  ZSNES is written by the ZSNES Team (See AUTHORS.TXT)
  ZSNES comes with ABSOLUTELY NO WARRANTY.  This is free software,
  and you are welcome to redistribute it under certain conditions;
  please read 'LICENSE.TXT' thoroughly before doing so.

  Use ZSNES -? for command line definitions.

  Starting Mouse detection.
  Unable to poll /dev/input/event12. Make sure you have read permissions to it.
  Unable to poll /dev/input/event11. Make sure you have read permissions to it.
  Unable to poll /dev/input/event10. Make sure you have read permissions to it.
  Unable to poll /dev/input/event9. Make sure you have read permissions to it.
  Unable to poll /dev/input/event8. Make sure you have read permissions to it.
  Unable to poll /dev/input/event7. Make sure you have read permissions to it.
  Unable to poll /dev/input/event6. Make sure you have read permissions to it.
  Unable to poll /dev/input/event5. Make sure you have read permissions to it.
  Unable to poll /dev/input/event4. Make sure you have read permissions to it.
  Unable to poll /dev/input/event3. Make sure you have read permissions to it.
  Unable to poll /dev/input/event2. Make sure you have read permissions to it.
  Unable to poll /dev/input/event1. Make sure you have read permissions to it.
  Unable to poll /dev/input/event0. Make sure you have read permissions to it.
  ManyMouse: 0 mice detected.

  Audio Opened.
  Driver: Simple DirectMedia Layer output
  Channels: 2
  Rate: 44100

  ZSNES could not find any joysticks.
  *** buffer overflow detected ***: zsnes terminated
  ======= Backtrace: =========
  /lib/i386-linux-gnu/libc.so.6(__fortify_fail+0x63)[0xf732cbc3]
  /lib/i386-linux-gnu/libc.so.6(+0x10593a)[0xf732b93a]
  zsnes[0x807e5a5]
  zsnes[0x8103133]

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/zsnes/+bug/1173090/+subscriptions



More information about the Ubuntu-sponsors mailing list