Date: Thu, 20 Nov 2003 17:06:36 +0200 (EET) From: Valentin Nechayev <netch@lucky.net> To: FreeBSD-gnats-submit@FreeBSD.org Cc: snar@paranoia.ru Subject: ports/59510: security/libparanoia port kill() fix Message-ID: <200311201506.hAKF6aoW021885@burka.carrier.kiev.ua> Resent-Message-ID: <200311201510.hAKFA1g7071528@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 59510
>Category: ports
>Synopsis: security/libparanoia port kill() fix
>Confidential: no
>Severity: serious
>Priority: low
>Responsible: freebsd-ports-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: sw-bug
>Submitter-Id: current-users
>Arrival-Date: Thu Nov 20 07:10:00 PST 2003
>Closed-Date:
>Last-Modified:
>Originator: Valentin Nechayev
>Release: FreeBSD 4.8-RELEASE-p13 i386
>Organization:
Lucky Net Ltd.
>Environment:
System: FreeBSD burka.carrier.kiev.ua 4.8-RELEASE-p13 FreeBSD 4.8-RELEASE-p13 #2: Sun Oct 5 10:38:37 EEST 2003 root@burka.carrier.kiev.ua:/usr/obj/usr/src/sys/burka i386
>Description:
libparanoia (ports/security/libparanoia) should abort program in case
of stack frame bounds violation.
In kill() in stentry.c, argument order is incorrect.
As result, self-aborting isn't working.
>How-To-Repeat:
Read kill(2) man and see code.
>Fix:
Add patch:
>Release-Note:
>Audit-Trail:
>Unformatted:
--- stentry.c.orig Thu Nov 20 16:59:32 2003
+++ stentry.c Thu Nov 20 17:00:31 2003
@@ -20,7 +20,7 @@
openlog(__progname,LOG_NDELAY|LOG_PERROR|LOG_PID|LOG_CONS,LOG_USER);\
syslog(LOG_ERR,"Stack violation - exiting");\
closelog();\
- kill(SIGSEGV,getpid());\
+ kill(getpid(),SIGSEGV);\
exit(1) ;\
#ifdef PARANOIDAL_ROOT
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200311201506.hAKF6aoW021885>