[Bug libc/218] New: SIGSEGV in sunrpc/pmap_prot2.c

[Bug libc/218] New: SIGSEGV in sunrpc/pmap_prot2.c

[kimdon at esrf dot fr]

Hi,

This bug was originally reported here:

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=230219

There is a bug in sunrpc/pmap_prot2.c.  When xdr_pmaplist()
goes to free the pmaplist it does so in such a way that uses memory
after it has been free'd.

I will commit this and see if I can attach the patch and the demonstration program.

-David

-- 
           Summary: SIGSEGV in sunrpc/pmap_prot2.c
           Product: glibc
           Version: unspecified
            Status: NEW
          Severity: normal
          Priority: P2
         Component: libc
        AssignedTo: gotom at debian dot or dot jp
        ReportedBy: kimdon at esrf dot fr
                CC: glibc-bugs at sources dot redhat dot com
 GCC build triplet: i686-pc-linux-gnu
  GCC host triplet: i686-pc-linux-gnu
GCC target triplet: i686-pc-linux-gnu


http://sources.redhat.com/bugzilla/show_bug.cgi?id=218

------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

[Bug libc/218] SIGSEGV in sunrpc/pmap_prot2.c

[kimdon at esrf dot fr]

------- Additional Comments From kimdon at esrf dot fr  2004-06-14 12:01 -------
Created an attachment (id=111)
 --> (http://sources.redhat.com/bugzilla/attachment.cgi?id=111&action=view)
patch to fix the problem


-- 


http://sources.redhat.com/bugzilla/show_bug.cgi?id=218

------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

[Bug libc/218] SIGSEGV in sunrpc/pmap_prot2.c

[kimdon at esrf dot fr]

------- Additional Comments From kimdon at esrf dot fr  2004-06-14 12:08 -------
Created an attachment (id=112)
 --> (http://sources.redhat.com/bugzilla/attachment.cgi?id=112&action=view)
tarball containing demonstration of the problem

Demonstration of the bug and the fix:

% make
cc -Wall -g   -c -o bug.o bug.c
cc -Wall -g -c pmap_prot2.c
cc bug.o pmap_prot2.o -o bug
patch < pmap_prot2.c.patch
patching file pmap_prot2.c
cc -Wall -g -c pmap_prot2.c
cc bug.o pmap_prot2.o -o nobug
patch -R < pmap_prot2.c.patch
patching file pmap_prot2.c
./bug localhost
make: *** [showbug] Segmentation fault
./nobug localhost
%

-- 


http://sources.redhat.com/bugzilla/show_bug.cgi?id=218

------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

[Bug libc/218] SIGSEGV in sunrpc/pmap_prot2.c

[jakub at redhat dot com]

------- Additional Comments From jakub at redhat dot com  2004-06-18 10:02 -------
Fixed in CVS.

-- 
           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |FIXED


http://sources.redhat.com/bugzilla/show_bug.cgi?id=218

------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.