[Bug 401834] Re: Icebreaker works first time, but crashes on every subsequent startup

Alec Faithfull alec at snapdragon.demon.co.uk
Wed Sep 23 20:40:56 BST 2009


> Could you give us more details about the way to reproduce it

I'm not sure I can, I'm afraid - I can reliably reproduce it on several
different computers by simply running the program.

alec at TRAILBLAZER:~$ rm .icebreaker 
alec at TRAILBLAZER:~$ icebreaker
.icebreaker doesn't exist.
Welcome to IceBreaker.
alec at TRAILBLAZER:~$ icebreaker
*** stack smashing detected ***: icebreaker terminated
======= Backtrace: =========
/lib/tls/i686/cmov/libc.so.6(__fortify_fail+0x48)[0xb7f53da8]
/lib/tls/i686/cmov/libc.so.6(__fortify_fail+0x0)[0xb7f53d60]
icebreaker[0x80552dd]
icebreaker[0x80493ee]
icebreaker[0x8049604]
/lib/tls/i686/cmov/libc.so.6(__libc_start_main+0xe5)[0xb7e6c775]
icebreaker[0x80492d1]
======= Memory map: ========
08048000-08058000 r-xp 00000000 08:01 9666927    /usr/games/icebreaker
08058000-08059000 rw-p 00010000 08:01 9666927    /usr/games/icebreaker
08059000-080b4000 rw-p 08059000 00:00 0 
083a7000-083c8000 rw-p 083a7000 00:00 0          [heap]
b7aa7000-b7ab1000 r-xp 00000000 08:01 6340782    /lib/tls/i686/cmov/libnss_files-2.9.so
b7ab1000-b7ab2000 r--p 00009000 08:01 6340782    /lib/tls/i686/cmov/libnss_files-2.9.so
b7ab2000-b7ab3000 rw-p 0000a000 08:01 6340782    /lib/tls/i686/cmov/libnss_files-2.9.so
b7ab3000-b7abc000 r-xp 00000000 08:01 6340786    /lib/tls/i686/cmov/libnss_nis-2.9.so
b7abc000-b7abd000 r--p 00008000 08:01 6340786    /lib/tls/i686/cmov/libnss_nis-2.9.so
b7abd000-b7abe000 rw-p 00009000 08:01 6340786    /lib/tls/i686/cmov/libnss_nis-2.9.so
b7abe000-b7ad3000 r-xp 00000000 08:01 6340776    /lib/tls/i686/cmov/libnsl-2.9.so
b7ad3000-b7ad4000 r--p 00014000 08:01 6340776    /lib/tls/i686/cmov/libnsl-2.9.so
b7ad4000-b7ad5000 rw-p 00015000 08:01 6340776    /lib/tls/i686/cmov/libnsl-2.9.so
b7ad5000-b7ad7000 rw-p b7ad5000 00:00 0 
b7ad7000-b7ade000 r-xp 00000000 08:01 6340778    /lib/tls/i686/cmov/libnss_compat-2.9.so
b7ade000-b7adf000 r--p 00006000 08:01 6340778    /lib/tls/i686/cmov/libnss_compat-2.9.so
b7adf000-b7ae0000 rw-p 00007000 08:01 6340778    /lib/tls/i686/cmov/libnss_compat-2.9.so
b7ae0000-b7ae3000 rw-p b7ae0000 00:00 0 
b7ae3000-b7ae7000 r-xp 00000000 08:01 3293355    /usr/lib/libogg.so.0.5.3
b7ae7000-b7ae8000 r--p 00003000 08:01 3293355    /usr/lib/libogg.so.0.5.3
b7ae8000-b7ae9000 rw-p 00004000 08:01 3293355    /usr/lib/libogg.so.0.5.3
b7ae9000-b7af6000 r-xp 00000000 08:01 9322605    /lib/libgcc_s.so.1
b7af6000-b7af7000 r--p 0000c000 08:01 9322605    /lib/libgcc_s.so.1
b7af7000-b7af8000 rw-p 0000d000 08:01 9322605    /lib/libgcc_s.so.1
b7af8000-b7bdc000 r-xp 00000000 08:01 3293285    /usr/lib/libstdc++.so.6.0.10
b7bdc000-b7be0000 r--p 000e3000 08:01 3293285    /usr/lib/libstdc++.so.6.0.10
b7be0000-b7be1000 rw-p 000e7000 08:01 3293285    /usr/lib/libstdc++.so.6.0.10
b7be1000-b7be7000 rw-p b7be1000 00:00 0 
b7be7000-b7c02000 r-xp 00000000 08:01 9669176    /usr/lib/libvorbis.so.0.4.0
b7c02000-b7c03000 r--p 0001a000 08:01 9669176    /usr/lib/libvorbis.so.0.4.0
b7c03000-b7c11000 rw-p 0001b000 08:01 9669176    /usr/lib/libvorbis.so.0.4.0
b7c11000-b7c18000 r-xp 00000000 08:01 6340796    /lib/tls/i686/cmov/librt-2.9.so
b7c18000-b7c19000 r--p 00006000 08:01 6340796    /lib/tls/i686/cmov/librt-2.9.so
b7c19000-b7c1a000 rw-p 00007000 08:01 6340796    /lib/tls/i686/cmov/librt-2.9.so
b7c1a000-b7c1b000 rw-p b7c1a000 00:00 0 
b7c1b000-b7c56000 r-xp 00000000 08:01 9673315    /usr/lib/libsmpeg-0.4.so.0.1.4
b7c56000-b7c57000 r--p 0003a000 08:01 9673315    /usr/lib/libsmpeg-0.4.so.0.1.4
b7c57000-b7c58000 rw-p 0003b000 08:01 9673315    /usr/lib/libsmpeg-0.4.so.0.1.4
b7c58000-b7c74000 rw-p b7c58000 00:00 0 
b7c74000-b7c7b000 r-xp 00000000 08:01 9670085    /usr/lib/libvorbisfile.so.3.2.0
b7c7b000-b7c7c000 r--p 00006000 08:01 9670085    /usr/lib/libvorbisfile.so.3.2.0
b7c7c000-b7c7d000 rw-p 00007000 08:01 9670085    /usr/lib/libvorbisfile.so.3.2.0
b7c7d000-b7cc4000 r-xp 00000000 08:01 9670505    /usr/lib/libmikmod.so.2.0.4
b7cc4000-b7cc6000 rw-p 00047000 08:01 9670505    /usr/lib/libmikmod.so.2.0.4
b7cc6000-b7cdb000 r-xp 00000000 08:01 6340792    /lib/tls/i686/cmov/libpthread-2.9.so
b7cdb000-b7cdc000 r--p 00014000 08:01 6340792    /lib/tls/i686/cmov/libpthread-2.9.so
b7cdc000-b7cdd000 rw-p 00015000 08:01 6340792    /lib/tls/i686/cmov/libpthread-2.9.so
b7cdd000-b7cdf000 rw-p b7cdd000 00:00 0 
b7cdf000-b7cf2000 r-xp 00000000 08:01 9670053    /usr/lib/libdirect-1.0.so.0.1.0
b7cf2000-b7cf3000 r--p 00012000 08:01 9670053    /usr/lib/libdirect-1.0.so.0.1.0
b7cf3000-b7cf4000 rw-p 00013000 08:01 9670053    /usr/lib/libdirect-1.0.so.0.1.0
b7cf4000-b7cfb000 r-xp 00000000 08:01 9670886    /usr/lib/libfusion-1.0.so.0.1.0
b7cfb000-b7cfc000 r--p 00006000 08:01 9670886    /usr/lib/libfusion-1.0.so.0.1.0
b7cfc000-b7cfd000 rw-p 00007000 08:01 9670886    /usr/lib/libfusion-1.0.so.0.1.0
b7cfd000-b7cfe000 rw-p b7cfd000 00:00 0 
b7cfe000-b7d62000 r-xp 00000000 08:01 9670054    /usr/lib/libdirectfb-1.0.so.0.1.0
b7d62000-b7d63000 r--p 00063000 08:01 9670054    /usr/lib/libdirectfb-1.0.so.0.1.0
b7d63000-b7d64000 rw-p 00064000 08:01 9670054    /usr/lib/libdirectfb-1.0.so.0.1.0
b7d64000-b7d66000 r-xp 00000000 08:01 6340770    /lib/tls/i686/cmov/libdl-2.9.so
b7d66000-b7d67000 r--p 00001000 08:01 6340770    /lib/tls/i686/cmov/libdl-2.9.so
b7d67000-b7d68000 rw-p 00002000 08:01 6340770    /lib/tls/i686/cmov/libdl-2.9.so
b7d68000-b7d8c000 r-xp 00000000 08:01 6340772    /lib/tls/i686/cmov/libm-2.9.so
b7d8c000-b7d8d000 r--p 00023000 08:01 6340772    /lib/tls/i686/cmov/libm-2.9.so
b7d8d000-b7d8e000 rw-p 00024000 08:01 6340772    /lib/tls/i686/cmov/libm-2.9.so
b7d8e000-b7e51000 r-xp 00000000 08:01 9667642    /usr/lib/libasound.so.2.0.0
b7e51000-b7e53000 r--p 000c2000 08:01 9667642    /usr/lib/libasound.so.2.0.0
b7e53000-b7e56000 rw-p 000c4000 08:01 9667642    /usr/lib/libasound.so.2.0.0
b7e56000-b7fb2000 r-xp 00000000 08:01 6340625    /lib/tls/i686/cmov/libc-2.9.so
b7fb2000-b7fb3000 ---p 0015c000 08:01 6340625    /lib/tls/i686/cmov/libc-2.9.so
b7fb3000-b7fb5000 r--p 0015c000 08:01 6340625    /lib/tls/i686/cmov/libc-2.9.so
b7fb5000-b7fb6000 rw-p 0015e000 08:01 6340625    /lib/tls/i686/cmov/libc-2.9.so
b7fb6000-b7fba000 rw-p b7fb6000 00:00 0 
b7fba000-b7fdf000 r-xp 00000000 08:01 9668187    /usr/lib/libSDL_mixer-1.2.so.0.2.6
b7fdf000-b7fe0000 r--p 00024000 08:01 9668187    /usr/lib/libSDL_mixer-1.2.so.0.2.6
b7fe0000-b7fe9000 rw-p 00025000 08:01 9668187    /usr/lib/libSDL_mixer-1.2.so.0.2.6
b7fe9000-b8013000 rw-p b7fe9000 00:00 0 
b8013000-b807a000 r-xp 00000000 08:01 9668934    /usr/lib/libSDL-1.2.so.0.11.2
b807a000-b807b000 ---p 00067000 08:01 9668934    /usr/lib/libSDL-1.2.so.0.11.2
b807b000-b807c000 r--p 00067000 08:01 9668934    /usr/lib/libSDL-1.2.so.0.11.2
b807c000-b807d000 rw-p 00068000 08:01 9668934    /usr/lib/libSDL-1.2.so.0.11.2
b807d000-b80a8000 rw-p b807d000 00:00 0 
b80be000-b80c0000 rw-p b80be000 00:00 0 
b80c0000-b80c1000 r-xp b80c0000 00:00 0          [vdso]
b80c1000-b80dd000 r-xp 00000000 08:01 9322572    /lib/ld-2.9.so
b80dd000-b80de000 r--p 0001b000 08:01 9322572    /lib/ld-2.9.so
b80de000-b80df000 rw-p 0001c000 08:01 9322572    /lib/ld-2.9.so
bfeca000-bfedf000 rw-p bffeb000 00:00 0          [stack]
Aborted

Recompiling the program with -fno-stack-protector makes the problem go
away, and recompiling it with debugging symbols shows that the stack
overflow happens in the readoptions function. Apparently I'm wrong about
the specific string that triggers it, but I don't think I'm wrong about
the bug itself, so I'd be interested to find out why it doesn't affect
you.

> and your current system/configuration please ?

Up-to-date Jaunty (32-bit) on a two-year-old Dell Inspiron 1520, an
Intel Core 2 Duo laptop with two and a half gigabytes of RAM and a
NVIDIA GeForce 8400M GS graphics card.

> Also do you send this patch upstream ? They could be interested.

The upstream code hasn't been updated for seven years now. I'll be happy
to, eventually, but I thought I'd try to fix it in my distribution - and
to get some patch review - first!

-- 
Icebreaker works first time, but crashes on every subsequent startup
https://bugs.launchpad.net/bugs/401834
You received this bug notification because you are a member of Ubuntu
Sponsors for universe, which is a direct subscriber.



More information about the Ubuntu-universe-sponsors mailing list