From owner-freebsd-bugs Fri Jun 12 15:00:29 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id PAA25010 for freebsd-bugs-outgoing; Fri, 12 Jun 1998 15:00:29 -0700 (PDT) (envelope-from owner-freebsd-bugs@FreeBSD.ORG) Received: from freefall.freebsd.org (freefall.FreeBSD.ORG [204.216.27.21]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id PAA25000 for ; Fri, 12 Jun 1998 15:00:27 -0700 (PDT) (envelope-from gnats@FreeBSD.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.8.8/8.8.5) id PAA23270; Fri, 12 Jun 1998 15:00:01 -0700 (PDT) Received: from ussenterprise.ufp.org (bicknell@ussenterprise.ufp.org [209.12.7.40]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id OAA23703 for ; Fri, 12 Jun 1998 14:51:07 -0700 (PDT) (envelope-from bicknell@ussenterprise.ufp.org) Received: (from bicknell@localhost) by ussenterprise.ufp.org (8.8.8/8.8.7) id RAA09751; Fri, 12 Jun 1998 17:50:51 -0400 (EDT) Message-Id: <199806122150.RAA09751@ussenterprise.ufp.org> Date: Fri, 12 Jun 1998 17:50:51 -0400 (EDT) From: Leo Bicknell Reply-To: bicknell@ufp.org To: FreeBSD-gnats-submit@FreeBSD.ORG X-Send-Pr-Version: 3.2 Subject: bin/6933: Inetd corrupting pointer. Sender: owner-freebsd-bugs@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org >Number: 6933 >Category: bin >Synopsis: Inetd corrupting a pointer then passing to free. >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Fri Jun 12 15:00:00 PDT 1998 >Last-Modified: >Originator: Leo Bicknell >Organization: United Federation of Planets >Release: FreeBSD 2.2.5-RELEASE i386 >Environment: Seen on FreeBSD 2.2.5 and 2.2.6 systems using "stock" inetd's. >Description: Users connecting to inetd services (eg telnet, pop3) get the message "inetd in free(), warning junk pointer, too low to make sense." This was traced to about line 1043 of /usr/src/lib/libc/stdlib/malloc.c, in the ifree function. It appears inetd is corrupting a pointer, then passing it to free triggering an error. Once this state has been entered all additional inetd services exhibit the same behavior. Inetd must be restarted. >How-To-Repeat: Unknown. Problem has occured 3 times to date with no common elements leading up to the failure. This has happened with three different config files as well, making it unlikely it is a config file anomoly. >Fix: >Audit-Trail: >Unformatted: To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-bugs" in the body of the message