[Bug malloc/10345] malloc_printerr calls into malloc and then crashes again

[Bug malloc/10345] malloc_printerr calls into malloc and then crashes again

[jsm28 at gcc dot gnu.org]

http://sourceware.org/bugzilla/show_bug.cgi?id=10345

Joseph Myers <jsm28 at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
          Component|libc                        |malloc

-- 
Configure bugmail: http://sourceware.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

[Bug malloc/10345] malloc_printerr calls into malloc and then crashes again

[andrew.beard at fidelissecurity dot com]

http://sourceware.org/bugzilla/show_bug.cgi?id=10345

Andrew Beard <andrew.beard at fidelissecurity dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |andrew.beard at
                   |                            |fidelissecurity dot com

-- 
Configure bugmail: http://sourceware.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

[Bug malloc/10345] malloc_printerr calls into malloc and then crashes again

[schwab@linux-m68k.org]

http://sourceware.org/bugzilla/show_bug.cgi?id=10345

Andreas Schwab <schwab@linux-m68k.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         AssignedTo|drepper.fsp at gmail dot    |unassigned at sourceware
                   |com                         |dot org

-- 
Configure bugmail: http://sourceware.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

[Bug malloc/10345] malloc_printerr calls into malloc and then crashes again

[bharath.vegito at gmail dot com]

http://sourceware.org/bugzilla/show_bug.cgi?id=10345

Bharath H S <bharath.vegito at gmail dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |bharath.vegito at gmail dot com

--- Comment #2 from Bharath H S <bharath.vegito at gmail dot com> ---
Collin,
This bug is reproducible in ubuntu as well running udev

bug https://bugs.launchpad.net/ubuntu/+source/udev/+bug/601356

You mentioned commit 
http://sourceware.org/git/?p=glibc.git;a=commit;f=sysdeps/posix/libc_fatal.c;h=48dcd0ba84c5a0fa08a0bd000b24af07d20dce44 
introduced the bug.

This commit adds assert/fatal messages into the core file. So, reverting this
means it will be missing in the core file, however messages printed by libc on
stdout will continue to happen. Is this correct?

Thanks
Bharath

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug malloc/10345] malloc_printerr calls into malloc and then crashes again

[ondra at iuuk dot mff.cuni.cz]

http://sourceware.org/bugzilla/show_bug.cgi?id=10345

OndrejBilka <ondra at iuuk dot mff.cuni.cz> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |ondra at iuuk dot mff.cuni.cz

--- Comment #3 from OndrejBilka <ondra at iuuk dot mff.cuni.cz> ---

> This commit adds assert/fatal messages into the core file. So, reverting this 
> means it will be missing in the core file, however messages printed by libc on 
> stdout will continue to happen. Is this correct?

When looking to sysdeps/posix/libc_fatal.c there is no longer malloc present. 
Running git blame shows it was changed in commit f8a3b5bf from 2011-05-15 which
is after Colin's message.

Did you tested with libc that contain commit f8a3b5bf ?

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug malloc/10345] malloc_printerr calls into malloc and then crashes again

[bharath.vegito at gmail dot com]

http://sourceware.org/bugzilla/show_bug.cgi?id=10345

--- Comment #4 from Bharath H S <bharath.vegito at gmail dot com> ---
Hi OndrejBilka,
>>When looking to sysdeps/posix/libc_fatal.c there is no longer malloc present. 
Running git blame shows it was changed in commit f8a3b5bf from 2011-05-15 which
is after Colin's message.

I checked the commits and I saw that latest code uses mmap. 

>>Did you tested with libc that contain commit f8a3b5bf ?
I had not tested this. From the bug, it seemed that this issue is present since
2.10 onwards and since it is not fixed. It will be in version 2.15 also.

I have a usecase for glibc-2.15 and hence wondered if there is a fix for this
bug. If a proposed fix does not exist, I was wondering the repercussions of
reverting the commit that caused the bug which is

http://sourceware.org/git/?p=glibc.git;a=commit;f=sysdeps/posix/libc_fatal.c;h=48dcd0ba84c5a0fa08a0bd000b24af07d20dce44

Since, you pointed out the the commit f8a3b5bf replaces malloc with mmap in
libc_fatal.c, it seems to me commit f8a3b5bf itself is the fix for this bug
also. Isn't it? If yes, we can close the bug setting "Target Milestone = 2.13"
corresponding to commit f8a3b5bf.

As of my usecase, since f8a3b5bf is before 2.15, this bug would be already
fixed in 2.15.

Thanks
Bharath

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug malloc/10345] malloc_printerr calls into malloc and then crashes again

[neleai at seznam dot cz]

https://sourceware.org/bugzilla/show_bug.cgi?id=10345

Ondrej Bilka <neleai at seznam dot cz> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
                 CC|                            |neleai at seznam dot cz
         Resolution|---                         |FIXED
   Target Milestone|---                         |2.15.1

--- Comment #5 from Ondrej Bilka <neleai at seznam dot cz> ---
> As of my usecase, since f8a3b5bf is before 2.15, this bug would be already 
> fixed in 2.15.

It should so I asked if you could reproduce it there. As you did not answer if
that works I will assume it works on 2.15

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug malloc/10345] malloc_printerr calls into malloc and then crashes again

[fweimer at redhat dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=10345

Florian Weimer <fweimer at redhat dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
              Flags|                            |security-

-- 
You are receiving this mail because:
You are on the CC list for the bug.