public inbox for glibc-bugs@sourceware.org
help / color / mirror / Atom feed
* [Bug libc/30584] New: initstate and initstate_r crash when the state argument is unaligned
@ 2023-06-25 15:52 bruno at clisp dot org
2023-06-25 15:52 ` [Bug libc/30584] " bruno at clisp dot org
` (4 more replies)
0 siblings, 5 replies; 6+ messages in thread
From: bruno at clisp dot org @ 2023-06-25 15:52 UTC (permalink / raw)
To: glibc-bugs
https://sourceware.org/bugzilla/show_bug.cgi?id=30584
Bug ID: 30584
Summary: initstate and initstate_r crash when the state
argument is unaligned
Product: glibc
Version: 2.36
Status: UNCONFIRMED
Severity: normal
Priority: P2
Component: libc
Assignee: unassigned at sourceware dot org
Reporter: bruno at clisp dot org
CC: drepper.fsp at gmail dot com
Target Milestone: ---
Created attachment 14947
--> https://sourceware.org/bugzilla/attachment.cgi?id=14947&action=edit
test case foo1.c
On Linux/SPARC (both in 64-bit mode and in 32-bit mode), the initstate() and
initstate_r() functions crash when the state argument is unaligned.
The specification of initstate() in
https://pubs.opengroup.org/onlinepubs/9699919799/functions/initstate.html and
the documentation of initstate() and initstate_r() in
https://www.gnu.org/software/libc/manual/html_node/BSD-Random.html require
merely a byte array. So, passing an aligned byte array (of size 128 or more) is
allowed.
How to reproduce:
Remote login to cfarm105.cfarm.net.
$ gcc -Wall foo1.c
$ ./a.out
Bus error
$ gcc -m32 -Wall foo1.c
$ ./a.out
Bus error
$ gcc -Wall foo2.c
$ ./a.out
Bus error
$ gcc -m32 -Wall foo2.c
$ ./a.out
Bus error
--
You are receiving this mail because:
You are on the CC list for the bug.
^ permalink raw reply [flat|nested] 6+ messages in thread
* [Bug libc/30584] initstate and initstate_r crash when the state argument is unaligned
2023-06-25 15:52 [Bug libc/30584] New: initstate and initstate_r crash when the state argument is unaligned bruno at clisp dot org
@ 2023-06-25 15:52 ` bruno at clisp dot org
2023-06-25 15:53 ` bruno at clisp dot org
` (3 subsequent siblings)
4 siblings, 0 replies; 6+ messages in thread
From: bruno at clisp dot org @ 2023-06-25 15:52 UTC (permalink / raw)
To: glibc-bugs
https://sourceware.org/bugzilla/show_bug.cgi?id=30584
--- Comment #1 from Bruno Haible <bruno at clisp dot org> ---
Created attachment 14948
--> https://sourceware.org/bugzilla/attachment.cgi?id=14948&action=edit
test case foo2.c
--
You are receiving this mail because:
You are on the CC list for the bug.
^ permalink raw reply [flat|nested] 6+ messages in thread
* [Bug libc/30584] initstate and initstate_r crash when the state argument is unaligned
2023-06-25 15:52 [Bug libc/30584] New: initstate and initstate_r crash when the state argument is unaligned bruno at clisp dot org
2023-06-25 15:52 ` [Bug libc/30584] " bruno at clisp dot org
@ 2023-06-25 15:53 ` bruno at clisp dot org
2023-06-25 15:54 ` bruno at clisp dot org
` (2 subsequent siblings)
4 siblings, 0 replies; 6+ messages in thread
From: bruno at clisp dot org @ 2023-06-25 15:53 UTC (permalink / raw)
To: glibc-bugs
https://sourceware.org/bugzilla/show_bug.cgi?id=30584
Bruno Haible <bruno at clisp dot org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Host| |sparc64-unknown-linux-gnu
Build| |sparc64-unknown-linux-gnu
--
You are receiving this mail because:
You are on the CC list for the bug.
^ permalink raw reply [flat|nested] 6+ messages in thread
* [Bug libc/30584] initstate and initstate_r crash when the state argument is unaligned
2023-06-25 15:52 [Bug libc/30584] New: initstate and initstate_r crash when the state argument is unaligned bruno at clisp dot org
2023-06-25 15:52 ` [Bug libc/30584] " bruno at clisp dot org
2023-06-25 15:53 ` bruno at clisp dot org
@ 2023-06-25 15:54 ` bruno at clisp dot org
2023-06-25 23:38 ` ppluzhnikov at google dot com
2023-07-04 9:41 ` schwab@linux-m68k.org
4 siblings, 0 replies; 6+ messages in thread
From: bruno at clisp dot org @ 2023-06-25 15:54 UTC (permalink / raw)
To: glibc-bugs
https://sourceware.org/bugzilla/show_bug.cgi?id=30584
--- Comment #2 from Bruno Haible <bruno at clisp dot org> ---
I meant: Passing an *unaligned* byte array is allowed.
--
You are receiving this mail because:
You are on the CC list for the bug.
^ permalink raw reply [flat|nested] 6+ messages in thread
* [Bug libc/30584] initstate and initstate_r crash when the state argument is unaligned
2023-06-25 15:52 [Bug libc/30584] New: initstate and initstate_r crash when the state argument is unaligned bruno at clisp dot org
` (2 preceding siblings ...)
2023-06-25 15:54 ` bruno at clisp dot org
@ 2023-06-25 23:38 ` ppluzhnikov at google dot com
2023-07-04 9:41 ` schwab@linux-m68k.org
4 siblings, 0 replies; 6+ messages in thread
From: ppluzhnikov at google dot com @ 2023-06-25 23:38 UTC (permalink / raw)
To: glibc-bugs
https://sourceware.org/bugzilla/show_bug.cgi?id=30584
Paul Pluzhnikov <ppluzhnikov at google dot com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Last reconfirmed| |2023-06-25
CC| |ppluzhnikov at google dot com
Ever confirmed|0 |1
Status|UNCONFIRMED |NEW
--
You are receiving this mail because:
You are on the CC list for the bug.
^ permalink raw reply [flat|nested] 6+ messages in thread
* [Bug libc/30584] initstate and initstate_r crash when the state argument is unaligned
2023-06-25 15:52 [Bug libc/30584] New: initstate and initstate_r crash when the state argument is unaligned bruno at clisp dot org
` (3 preceding siblings ...)
2023-06-25 23:38 ` ppluzhnikov at google dot com
@ 2023-07-04 9:41 ` schwab@linux-m68k.org
4 siblings, 0 replies; 6+ messages in thread
From: schwab@linux-m68k.org @ 2023-07-04 9:41 UTC (permalink / raw)
To: glibc-bugs
https://sourceware.org/bugzilla/show_bug.cgi?id=30584
--- Comment #3 from Andreas Schwab <schwab@linux-m68k.org> ---
This is inherited from BSD, which documents that the state array needs to be
uint32_t aligned.
--
You are receiving this mail because:
You are on the CC list for the bug.
^ permalink raw reply [flat|nested] 6+ messages in thread
end of thread, other threads:[~2023-07-04 9:41 UTC | newest]
Thread overview: 6+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2023-06-25 15:52 [Bug libc/30584] New: initstate and initstate_r crash when the state argument is unaligned bruno at clisp dot org
2023-06-25 15:52 ` [Bug libc/30584] " bruno at clisp dot org
2023-06-25 15:53 ` bruno at clisp dot org
2023-06-25 15:54 ` bruno at clisp dot org
2023-06-25 23:38 ` ppluzhnikov at google dot com
2023-07-04 9:41 ` schwab@linux-m68k.org
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).