chkutmp failure

Bug #571416 reported by Lupe Christoph
20
This bug affects 4 people
Affects Status Importance Assigned to Milestone
chkrootkit (Ubuntu)
Confirmed
Medium
Unassigned

Bug Description

Binary package hint: chkrootkit

# /usr/lib/chkrootkit/chkutmp
 The tty of the following user process(es) were not found
 in /var/run/utmp !
! RUID PID TTY CMD
! lupe 13395 pts/0 /usr/bin/mutt
! lupe 13266 pts/0 /bin/bash -i /home/lupe/scripts/muttloop
! lupe 13398 pts/3 /usr/bin/mutt -f Incoming/Spam
! lupe 13270 pts/3 /bin/bash -i /home/lupe/scripts/muttloop -f Incoming/Spam
! lupe 13396 pts/4 /usr/bin/mutt -f Incoming/Spam.sure
! lupe 13271 pts/4 /bin/bash -i /home/lupe/scripts/muttloop -f Incoming/Spam.sure
! lupe 2673 pts/5 /usr/bin/mutt -y
! lupe 13272 pts/5 /bin/bash -i /home/lupe/scripts/muttloop -y
# ls -l /dev/pts/0
crw--w---- 1 lupe tty 136, 0 2010-04-28 21:45 /dev/pts/0

Only processes started from a launcher are affected. The command is
gnome-terminal --geometry=197x66+0+27 --tab-with-profile=mutt:INBOX --tab-with-profile=mutt:Octogon --tab-with-profile=mutt:Spam.perhaps --tab-with-profile=mutt:Spam --tab-with-profile=mutt:Spam.sure --tab-with-profile=mutt:Misc --tab-with-profile=Default

And only some of those. Here is the process tree:

lupe 13252 1 0 Apr27 ? 00:01:39 gnome-terminal --geometry=197x66+0+27 --tab-with-profile=mutt:INBOX --tab-with-profile=mutt:Octogon --tab-with-profile=mutt:Spam.perhaps --tab-with
lupe 13266 13252 0 Apr27 pts/0 00:00:00 \_ /bin/bash -i /home/lupe/scripts/muttloop
lupe 13395 13266 0 Apr27 pts/0 00:00:01 | \_ /usr/bin/mutt
lupe 13268 13252 0 Apr27 pts/1 00:00:00 \_ /bin/bash -i /home/lupe/scripts/muttloop -f imap://<email address hidden>/INBOX
lupe 13530 13268 0 Apr27 pts/1 00:00:01 | \_ /usr/bin/mutt -f imap://<email address hidden>/INBOX
lupe 13269 13252 0 Apr27 pts/2 00:00:00 \_ /bin/bash -i /home/lupe/scripts/muttloop -f Incoming/Spam.perhaps
lupe 13400 13269 0 Apr27 pts/2 00:00:00 | \_ /usr/bin/mutt -f Incoming/Spam.perhaps
lupe 13270 13252 0 Apr27 pts/3 00:00:00 \_ /bin/bash -i /home/lupe/scripts/muttloop -f Incoming/Spam
lupe 13398 13270 0 Apr27 pts/3 00:00:00 | \_ /usr/bin/mutt -f Incoming/Spam
lupe 13271 13252 0 Apr27 pts/4 00:00:00 \_ /bin/bash -i /home/lupe/scripts/muttloop -f Incoming/Spam.sure
lupe 13396 13271 0 Apr27 pts/4 00:00:02 | \_ /usr/bin/mutt -f Incoming/Spam.sure
lupe 13272 13252 0 Apr27 pts/5 00:00:00 \_ /bin/bash -i /home/lupe/scripts/muttloop -y
lupe 2673 13272 0 21:41 pts/5 00:00:00 | \_ /usr/bin/mutt -y

You can see that pts/1 and pts/2 are missing.

So this is really strange. I have no idea what is happening here. The effect is new with Lucid.

ProblemType: Bug
DistroRelease: Ubuntu 10.04
Package: chkrootkit 0.49-3
ProcVersionSignature: Ubuntu 2.6.32-21.32-generic 2.6.32.11+drm33.2
Uname: Linux 2.6.32-21-generic x86_64
NonfreeKernelModules: fglrx
Architecture: amd64
Date: Wed Apr 28 21:51:21 2010
ProcEnviron:
 LANG=en_US.UTF-8
 SHELL=/bin/bash
SourcePackage: chkrootkit

Revision history for this message
Lupe Christoph (lupe) wrote :
Revision history for this message
Chuck Short (zulcss) wrote :

Which version are you using?

chuck

Changed in chkrootkit (Ubuntu):
importance: Undecided → Low
status: New → Incomplete
Revision history for this message
Lupe Christoph (lupe) wrote : Re: [Bug 571416] Re: chkutmp failure

On Monday, 2010-05-03 at 13:17:25 -0000, Chuck Short wrote:
> Which version are you using?

As you can see above, chkrootkit 0.49-3.

Lupe Christoph
--
| There is no substitute for bad design except worse design. |
| /me |

Revision history for this message
Chuck Short (zulcss) wrote :

Thanks for the info.

Changed in chkrootkit (Ubuntu):
importance: Low → Medium
status: Incomplete → Confirmed
Revision history for this message
Graeme Glass (graemeglass) wrote :

Checking `chkutmp'... *** stack smashing detected ***: ./chkutmp terminated
======= Backtrace: =========
/lib/i386-linux-gnu/libc.so.6(__fortify_fail+0x45)[0xb76cb255]
/lib/i386-linux-gnu/libc.so.6(+0x10420a)[0xb76cb20a]
./chkutmp[0x8048b15]
./chkutmp[0x8048ce2]
/lib/i386-linux-gnu/libc.so.6(__libc_start_main+0xf3)[0xb75e04d3]
======= Memory map: ========
08048000-0804a000 r-xp 00000000 08:06 10620193 /usr/lib/chkrootkit/chkutmp
0804a000-0804b000 r--p 00001000 08:06 10620193 /usr/lib/chkrootkit/chkutmp
0804b000-0804c000 rw-p 00002000 08:06 10620193 /usr/lib/chkrootkit/chkutmp
08cae000-08ccf000 rw-p 00000000 00:00 0 [heap]
b7591000-b75ad000 r-xp 00000000 08:06 15205284 /lib/i386-linux-gnu/libgcc_s.so.1
b75ad000-b75ae000 r--p 0001b000 08:06 15205284 /lib/i386-linux-gnu/libgcc_s.so.1
b75ae000-b75af000 rw-p 0001c000 08:06 15205284 /lib/i386-linux-gnu/libgcc_s.so.1
b75c6000-b75c7000 rw-p 00000000 00:00 0
b75c7000-b776a000 r-xp 00000000 08:06 15215066 /lib/i386-linux-gnu/libc-2.15.so
b776a000-b776b000 ---p 001a3000 08:06 15215066 /lib/i386-linux-gnu/libc-2.15.so
b776b000-b776d000 r--p 001a3000 08:06 15215066 /lib/i386-linux-gnu/libc-2.15.so
b776d000-b776e000 rw-p 001a5000 08:06 15215066 /lib/i386-linux-gnu/libc-2.15.so
b776e000-b7771000 rw-p 00000000 00:00 0
b7787000-b778a000 rw-p 00000000 00:00 0
b778a000-b778b000 r-xp 00000000 00:00 0 [vdso]
b778b000-b77ab000 r-xp 00000000 08:06 15215062 /lib/i386-linux-gnu/ld-2.15.so
b77ab000-b77ac000 r--p 0001f000 08:06 15215062 /lib/i386-linux-gnu/ld-2.15.so
b77ac000-b77ad000 rw-p 00020000 08:06 15215062 /lib/i386-linux-gnu/ld-2.15.so
bfdd6000-bff4e000 rw-p 00000000 00:00 0 [stack]
Aborted (core dumped)

carter:~ $ sudo aptitude show chkrootkit
Package: chkrootkit
State: installed
Automatically installed: no
Version: 0.49-4ubuntu1
Priority: optional
Section: misc
Architecture: i386
Uncompressed Size: 881 k
Depends: libc6 (>= 2.7), debconf (>= 0.5) | debconf-2.0, binutils, net-tools, debconf, procps

carter:~ $ uname -a
Linux carter 3.2.0-32-generic-pae #51-Ubuntu SMP Wed Sep 26 21:54:23 UTC 2012 i686 i686 i386 GNU/Linux

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.