apachetop 0.12.6-9 report buffer overflow all the time

Bug #368903 reported by Ashley Benton
12
This bug affects 1 person
Affects Status Importance Assigned to Milestone
apachetop (Debian)
Fix Released
Unknown
apachetop (Fedora)
Fix Released
High
apachetop (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

Apachetop reported a buffer overflow on my server using Ubuntu 8.10 desktop (with apache2, mysql, and php5 installed). Believing I had a security problem I did a clean reinstall with ubuntu 9.04 desktop (with apache2 and php5) and tried apachetop before to setup apache 2 as a server.(It was installed and working with apache default page). The result is the same buffer overflow.

The first time I had the server (apache2 mysql and php5 serving a website on internet, the second time I had apache2 and php5 installed no configuration done yet)

Tags: apachetop

Related branches

Revision history for this message
In , Robert (robert-redhat-bugs-1) wrote :
Download full text (5.1 KiB)

Description of problem:
Please note, that the following problem also applies to Fedora 9.

robert@tux:~ > apachetop -f /var/log/httpd/access_log
*** buffer overflow detected ***: apachetop terminated
======= Backtrace: =========
/lib/libc.so.6(__fortify_fail+0x48)[0x3cec48]
/lib/libc.so.6[0x3ccd40]
/lib/libc.so.6[0x3cd4a8]
apachetop(__gxx_personality_v0+0x46d)[0x80496a5]
apachetop[0x804a2d6]
/lib/libc.so.6(__libc_start_main+0xe6)[0x2ee5d6]
apachetop(__gxx_personality_v0+0xd9)[0x8049311]
======= Memory map: ========
00110000-0012c000 r-xp 00000000 68:02 2965506 /lib/ld-2.8.so
0012c000-0012d000 r-xp 0001c000 68:02 2965506 /lib/ld-2.8.so
0012d000-0012e000 rwxp 0001d000 68:02 2965506 /lib/ld-2.8.so
0012e000-0012f000 r-xp 0012e000 00:00 0 [vdso]
0012f000-00160000 r-xp 00000000 68:02 2965525 /lib/libreadline.so.5.2
00160000-00164000 rwxp 00031000 68:02 2965525 /lib/libreadline.so.5.2
00164000-00165000 rwxp 00164000 00:00 0
00165000-00186000 r-xp 00000000 68:02 2965732 /lib/libncurses.so.5.6
00186000-00187000 rwxp 00020000 68:02 2965732 /lib/libncurses.so.5.6
00187000-001b0000 r-xp 00000000 68:02 2965518 /lib/libpcre.so.0.0.1
001b0000-001b1000 rwxp 00028000 68:02 2965518 /lib/libpcre.so.0.0.1
001b1000-00296000 r-xp 00000000 68:02 393288 /usr/lib/libstdc++.so.6.0.10
00296000-0029a000 r-xp 000e4000 68:02 393288 /usr/lib/libstdc++.so.6.0.10
0029a000-0029b000 rwxp 000e8000 68:02 393288 /usr/lib/libstdc++.so.6.0.10
0029b000-002a1000 rwxp 0029b000 00:00 0
002a1000-002c8000 r-xp 00000000 68:02 2965678 /lib/libm-2.8.so
002c8000-002c9000 r-xp 00026000 68:02 2965678 /lib/libm-2.8.so
002c9000-002ca000 rwxp 00027000 68:02 2965678 /lib/libm-2.8.so
002ca000-002d7000 r-xp 00000000 68:02 2965617 /lib/libgcc_s-4.3.0-20080428.so.1
002d7000-002d8000 rwxp 0000c000 68:02 2965617 /lib/libgcc_s-4.3.0-20080428.so.1
002d8000-0043b000 r-xp 00000000 68:02 2965520 /lib/libc-2.8.so
0043b000-0043d000 r-xp 00163000 68:02 2965520 /lib/libc-2.8.so
0043d000-0043e000 rwxp 00165000 68:02 2965520 /lib/libc-2.8.so
0043e000-00441000 rwxp 0043e000 00:00 0
00441000-00457000 r-xp 00000000 68:02 2965736 /lib/libtinfo.so.5.6
00457000-0045a000 rwxp 00015000 68:02 2965736 /lib/libtinfo.so.5.6
0045a000-0045d000 r-xp 00000000 68:02 2965644 /lib/libdl-2.8.so
0045d000-0045e000 r-xp 00002000 68:02 2965644 /lib/libdl-2.8.so
0045e000-0045f000 rwxp 00003000 68:02 2965644 /lib/libdl-2.8.so
08048000-08051000 r-xp 00000000 68:02 377773 /usr/bin/apachetop
08051000-08052000 rw-p 00009000 68:02 377773 /usr/bin/apachetop
0960c000-0962d000 rw-p 0960c000 00:00 0
b7f3c000-b7f40000 rw-p b7f3c000 00:00 0
bfb28000-bfb3d000 rw-p bffea000 00:00 0 [stack]
Canceled
robert@tux:~ >

Version-Release number of selected component (if applicable):
apachetop-0.12.6-4

How reproducible:
Everytime, just: apachetop -f /var/log/httpd/access_log

Actual results:
*** buffer overflow detected ***: apachetop terminated

Expected results:
Just working...

Additional info:
(gdb) bt
#0 0x0012e402 in __kernel_vsyscall ()
#1 0x00302660 in raise (sig=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
#2 0x00304028 in abort () at abort....

Read more...

Revision history for this message
In , Bug (bug-redhat-bugs) wrote :

Changing version to '9' as part of upcoming Fedora 9 GA.
More information and reason for this action is here:
http://fedoraproject.org/wiki/BugZappers/HouseKeeping

Revision history for this message
In , Robert (robert-redhat-bugs-1) wrote :

Ping?

Revision history for this message
In , Brad (brad-redhat-bugs) wrote :

apachetop-0.12.6-4.fc9.x86_64 does the same for me.

Revision history for this message
In , Robert (robert-redhat-bugs-1) wrote :

Created attachment 309968
apachetop-0.12.6-maxpathlen.patch

This patch solves the problem for me. Looks like behaviour changed a bit
compared with previous versions of Fedora. New apachetop-0.12.6-5 package
will fix this for Fedora 9 and Rawhide.

Revision history for this message
In , Robert (robert-redhat-bugs-1) wrote :

Package: apachetop-0.12.6-5.fc10 Tag: dist-f10 Status: complete
Package: apachetop-0.12.6-5.fc9 Tag: dist-f9-updates-candidate Status: complete

Revision history for this message
In , Fedora (fedora-redhat-bugs) wrote :

apachetop-0.12.6-5.fc9 has been submitted as an update for Fedora 9

Revision history for this message
In , Fedora (fedora-redhat-bugs) wrote :

apachetop-0.12.6-5.fc9 has been pushed to the Fedora 9 stable repository. If problems still persist, please make note of it in this bug report.

Revision history for this message
Ashley Benton (chuaukantli) wrote :
Revision history for this message
SabreWolfy (sabrewolfy) wrote :

Confirmed on Jaunty Server.

Changed in ubuntu:
status: New → Confirmed
Revision history for this message
Fantom1979 (swars79) wrote :
Download full text (4.9 KiB)

I am having a similar problem

*** buffer overflow detected ***: apachetop terminated
======= Backtrace: =========
/lib/tls/i686/cmov/libc.so.6(__fortify_fail+0x48)[0xb7d93da8]
/lib/tls/i686/cmov/libc.so.6[0xb7d91eb0]
/lib/tls/i686/cmov/libc.so.6[0xb7d92618]
apachetop[0x8049a05]
apachetop[0x804ad8a]
/lib/tls/i686/cmov/libc.so.6(__libc_start_main+0xe5)[0xb7cac775]
apachetop[0x8049781]
======= Memory map: ========
08048000-08051000 r-xp 00000000 08:01 761873 /usr/sbin/apachetop
08051000-08052000 r--p 00008000 08:01 761873 /usr/sbin/apachetop
08052000-08053000 rw-p 00009000 08:01 761873 /usr/sbin/apachetop
08675000-08696000 rw-p 08675000 00:00 0 [heap]
b7c3e000-b7c48000 r-xp 00000000 08:01 1754345 /lib/tls/i686/cmov/libnss_files-2.9.so
b7c48000-b7c49000 r--p 00009000 08:01 1754345 /lib/tls/i686/cmov/libnss_files-2.9.so
b7c49000-b7c4a000 rw-p 0000a000 08:01 1754345 /lib/tls/i686/cmov/libnss_files-2.9.so
b7c4a000-b7c53000 r-xp 00000000 08:01 1754349 /lib/tls/i686/cmov/libnss_nis-2.9.so
b7c53000-b7c54000 r--p 00008000 08:01 1754349 /lib/tls/i686/cmov/libnss_nis-2.9.so
b7c54000-b7c55000 rw-p 00009000 08:01 1754349 /lib/tls/i686/cmov/libnss_nis-2.9.so
b7c55000-b7c6a000 r-xp 00000000 08:01 1754339 /lib/tls/i686/cmov/libnsl-2.9.so
b7c6a000-b7c6b000 r--p 00014000 08:01 1754339 /lib/tls/i686/cmov/libnsl-2.9.so
b7c6b000-b7c6c000 rw-p 00015000 08:01 1754339 /lib/tls/i686/cmov/libnsl-2.9.so
b7c6c000-b7c6e000 rw-p b7c6c000 00:00 0
b7c6e000-b7c75000 r-xp 00000000 08:01 1754341 /lib/tls/i686/cmov/libnss_compat-2.9.so
b7c75000-b7c76000 r--p 00006000 08:01 1754341 /lib/tls/i686/cmov/libnss_compat-2.9.so
b7c76000-b7c77000 rw-p 00007000 08:01 1754341 /lib/tls/i686/cmov/libnss_compat-2.9.so
b7c77000-b7c79000 rw-p b7c77000 00:00 0
b7c79000-b7c8e000 r-xp 00000000 08:01 1754354 /lib/tls/i686/cmov/libpthread-2.9.so
b7c8e000-b7c8f000 r--p 00014000 08:01 1754354 /lib/tls/i686/cmov/libpthread-2.9.so
b7c8f000-b7c90000 rw-p 00015000 08:01 1754354 /lib/tls/i686/cmov/libpthread-2.9.so
b7c90000-b7c92000 rw-p b7c90000 00:00 0
b7c92000-b7c94000 r-xp 00000000 08:01 1754334 /lib/tls/i686/cmov/libdl-2.9.so
b7c94000-b7c95000 r--p 00001000 08:01 1754334 /lib/tls/i686/cmov/libdl-2.9.so
b7c95000-b7c96000 rw-p 00002000 08:01 1754334 /lib/tls/i686/cmov/libdl-2.9.so
b7c96000-b7df2000 r-xp 00000000 08:01 1754328 /lib/tls/i686/cmov/libc-2.9.so
b7df2000-b7df3000 ---p 0015c000 08:01 1754328 /lib/tls/i686/cmov/libc-2.9.so
b7df3000-b7df5000 r--p 0015c000 08:01 1754328 /lib/tls/i686/cmov/libc-2.9.so
b7df5000-b7df6000 rw-p 0015e000 08:01 1754328 /lib/tls/i686/cmov/libc-2.9.so
b7df6000-b7df9000 rw-p b7df6000 00:00 0
b7df9000-b7e06000 r-xp 00000000 08:01 1736769 /lib/libgcc_s.so.1
b7e06000-b7e07000 r--p 0000c000 08:01 1736769 /lib/libgcc_s.so.1
b7e07000-b7e08000 rw-p 0000d000 08:01 1736769 /lib/libgcc_s.so.1
b7e08000-b7e2c000 r-xp 00000000 08:01 1754336 /lib/tls/i686/cmov/libm-2.9.so
b7e2c000-b7e2d000 r--p 00023000 08:01 1754336 /lib/tls/i686/cmov/libm-2.9.so
b7e2d000-b7e2e000 rw-p 00024000 08:01 1754336 /lib/tls/i686/cmov/libm-2.9.so
b7e2e000-b7e2f000 rw-p b7e2e000 00:00 0
b7e2f000-b7f1300...

Read more...

tags: added: apachetop
Revision history for this message
Andrew (a-lawrynowicz) wrote :
Download full text (5.4 KiB)

Linux 2.6.28-13-generic #45-Ubuntu SMP Tue Jun 30 19:49:51 UTC 2009 i686 GNU/Linux

Also crashes on Ubuntu 9.04

*** buffer overflow detected ***: apachetop terminated
======= Backtrace: =========
/lib/tls/i686/cmov/libc.so.6(__fortify_fail+0x48)[0xb7ce3da8]
/lib/tls/i686/cmov/libc.so.6[0xb7ce1eb0]
/lib/tls/i686/cmov/libc.so.6[0xb7ce2618]
apachetop[0x8049a05]
apachetop[0x804ad8a]
/lib/tls/i686/cmov/libc.so.6(__libc_start_main+0xe5)[0xb7bfc775]
apachetop[0x8049781]
======= Memory map: ========
08048000-08051000 r-xp 00000000 08:06 3057861 /usr/sbin/apachetop
08051000-08052000 r--p 00008000 08:06 3057861 /usr/sbin/apachetop
08052000-08053000 rw-p 00009000 08:06 3057861 /usr/sbin/apachetop
097ab000-097cc000 rw-p 097ab000 00:00 0 [heap]
b7b8e000-b7b98000 r-xp 00000000 08:05 5521425 /lib/tls/i686/cmov/libnss_files-2.9.so
b7b98000-b7b99000 r--p 00009000 08:05 5521425 /lib/tls/i686/cmov/libnss_files-2.9.so
b7b99000-b7b9a000 rw-p 0000a000 08:05 5521425 /lib/tls/i686/cmov/libnss_files-2.9.so
b7b9a000-b7ba3000 r-xp 00000000 08:05 5521427 /lib/tls/i686/cmov/libnss_nis-2.9.so
b7ba3000-b7ba4000 r--p 00008000 08:05 5521427 /lib/tls/i686/cmov/libnss_nis-2.9.so
b7ba4000-b7ba5000 rw-p 00009000 08:05 5521427 /lib/tls/i686/cmov/libnss_nis-2.9.so
b7ba5000-b7bba000 r-xp 00000000 08:05 5521422 /lib/tls/i686/cmov/libnsl-2.9.so
b7bba000-b7bbb000 r--p 00014000 08:05 5521422 /lib/tls/i686/cmov/libnsl-2.9.so
b7bbb000-b7bbc000 rw-p 00015000 08:05 5521422 /lib/tls/i686/cmov/libnsl-2.9.so
b7bbc000-b7bbe000 rw-p b7bbc000 00:00 0
b7bbe000-b7bc5000 r-xp 00000000 08:05 5521423 /lib/tls/i686/cmov/libnss_compat-2.9.so
b7bc5000-b7bc6000 r--p 00006000 08:05 5521423 /lib/tls/i686/cmov/libnss_compat-2.9.so
b7bc6000-b7bc7000 rw-p 00007000 08:05 5521423 /lib/tls/i686/cmov/libnss_compat-2.9.so
b7bc7000-b7bc9000 rw-p b7bc7000 00:00 0
b7bc9000-b7bde000 r-xp 00000000 08:05 5521430 /lib/tls/i686/cmov/libpthread-2.9.so
b7bde000-b7bdf000 r--p 00014000 08:05 5521430 /lib/tls/i686/cmov/libpthread-2.9.so
b7bdf000-b7be0000 rw-p 00015000 08:05 5521430 /lib/tls/i686/cmov/libpthread-2.9.so
b7be0000-b7be2000 rw-p b7be0000 00:00 0
b7be2000-b7be4000 r-xp 00000000 08:05 5521419 /lib/tls/i686/cmov/libdl-2.9.so
b7be4000-b7be5000 r--p 00001000 08:05 5521419 /lib/tls/i686/cmov/libdl-2.9.so
b7be5000-b7be6000 rw-p 00002000 08:05 5521419 /lib/tls/i686/cmov/libdl-2.9.so
b7be6000-b7d42000 r-xp 00000000 08:05 5521416 /lib/tls/i686/cmov/libc-2.9.so
b7d42000-b7d43000 ---p 0015c000 08:05 5521416 /lib/tls/i686/cmov/libc-2.9.so
b7d43000-b7d45000 r--p 0015c000 08:05 5521416 /lib/tls/i686/cmov/libc-2.9.so
b7d45000-b7d46000 rw-p 0015e000 08:05 5521416 /lib/tls/i686/cmov/libc-2.9.so
b7d46000-b7d4a000 rw-p b7d46000 ...

Read more...

affects: ubuntu → apachetop (Ubuntu)
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package apachetop - 0.12.6-12ubuntu3

---------------
apachetop (0.12.6-12ubuntu3) lucid; urgency=low

  * debian/patches/02-maxpathlen.patch: Update and autoreconf -f -i,
    fixes FTBFS (LP: #368903)
 -- Daniel T Chen <email address hidden> Sat, 09 Jan 2010 18:29:13 -0500

Changed in apachetop (Ubuntu):
status: Confirmed → Fix Released
Changed in apachetop (Debian):
status: Unknown → New
Changed in apachetop (Debian):
status: New → Fix Released
Changed in apachetop (Fedora):
importance: Unknown → High
status: Unknown → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.