[Bug dynamic-link/28366] New: Calling name() on a locale object (std::locale) with LD_AUDIT library loaded results in SIGSEGV

["nnye at whitebeamsec dot com" <sourceware-bugzilla@sourceware.org>]

https://sourceware.org/bugzilla/show_bug.cgi?id=28366

            Bug ID: 28366
           Summary: Calling name() on a locale object (std::locale) with
                    LD_AUDIT library loaded results in SIGSEGV
           Product: glibc
           Version: unspecified
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: dynamic-link
          Assignee: unassigned at sourceware dot org
          Reporter: nnye at whitebeamsec dot com
  Target Milestone: ---

A bug is preventing CLI utilities such as apt from being profiled via LD_AUDIT:

$ cat auditmin.c # Minimal LD_AUDIT library
unsigned int la_version(unsigned int version) { return version; }
$ gcc -shared -fPIC auditmin.c -o auditmin.so

$ cat crasher.cpp
#include<locale>
int main { std::locale("").name(); }
$ g++ crasher.cpp -o crasher

Without LD_AUDIT loaded (works as intended):
$ ./crasher
$

With LD_AUDIT loaded:
$ LD_AUDIT=$PWD/auditmin.so ./crasher
Segmentation fault (core dumped)
$

gdb reports the issue occurs in std::locale::name in locale.cc (L133).

-- 
You are receiving this mail because:
You are on the CC list for the bug.