buglibffcall - foreign function call libraries - Bugs: bug #22082, selinux: Segmentation fault while...

 
 

bug #22082: selinux: Segmentation fault while testing

Submitted by:  Sam Steingold <sds>
Submitted on:  Tue 22 Jan 2008 08:07:44 PM UTC  
 
Category: NoneSeverity: 3 - Normal
Item Group: crashStatus: Fixed
Privacy: PublicAssigned to: Bruno Haible <haible>
Open/Closed: Closed

Add a New Comment(Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Thu 02 Feb 2017 11:24:08 PM UTC, comment #4:

Thanks for the report. This is fixed now:
http://git.savannah.gnu.org/gitweb/?p=libffcall.git;a=commit;h=04c6878e33bdf0a3d9a9a78abe090267ba9568aa

Bruno Haible <haible>
Project AdministratorIn charge of this item.
Thu 28 Feb 2008 03:41:41 PM UTC, comment #3:

Actually, I think that the failure on x86_64 (at least Debian bug #451356) is a different bug, having nothing to do with the NX bit, because it fails on a different test. (I'm not sure whether Debian bug #453242 is the same bug as this.)

Hubert Chathi <uhoreg>
Wed 23 Jan 2008 09:02:44 PM UTC, comment #2:

From what I can tell, this bug also causes failures on Opteron CPUs, since they have the NX bit. (e.g. see http://bugs.debian.org/451356 and http://bugs.debian.org/453242)

Hubert Chathi <uhoreg>
Tue 22 Jan 2008 08:22:11 PM UTC, comment #1:

http://sourceforge.net/tracker/index.php?func=detail&aid=1531290&group_id=1355&atid=101355
this is probably the same bug:
The output from the compilation is:
/bin/sh ./libtool --mode=link gcc -x none test2.o trampoline.lo -o test2
gcc -x none test2.o trampoline.o -o test2
./test1
trampoline: cannot make memory executable
make[2]: *** [check] Aborted

The output in audit.log is:
type=AVC msg=audit(1154277453.270:515): avc: denied {
execheap } for pid=6764 comm="test1"
scontext=user_u:system_r:unconfined_t:s0
tcontext=user_u:system_r:unconfined_t:s0 tclass=process

Thus there is a violation of the heap execution
policy of SELinux.

Sam Steingold <sds>
Project Administrator
Tue 22 Jan 2008 08:07:44 PM UTC, original submission:

http://sourceforge.net/tracker/index.php?func=detail&aid=1761791&group_id=1355&atid=101355

The following is my SELinux log which I think tells the reason what caused
segmentation fault when I tested clisp
/****************************************************/
Application
/.../clisp-2.41/build-with-gcc/callback/trampoline_r/test1 attempted to change the access protection of memory on the heap (e,g., allocated using malloc). This is a potential security problem.

Applications should not be doing this. Applications are sometimes coded incorrectly and request this permission.

The SELinux Memory Protection Tests web page explains how to remove this requirement.
/*****************************************************/

Sam Steingold <sds>
Project Administrator

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by haible (Posted a comment)
  • -unavailable- added by uhoreg (Posted a comment)
  • -unavailable- added by sds (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 4 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Thu 02 Feb 2017 11:24:22 PM UTChaibleSummaryselinux: Segementation fault while testing=>selinux: Segmentation fault while testing
    Thu 02 Feb 2017 11:24:08 PM UTChaibleStatusNone=>Fixed
      Open/ClosedOpen=>Closed
    Tue 28 Apr 2009 05:41:55 PM UTCsdsItem GroupNone=>crash

    Back to the top


    Powered by Savane 3.1-cleanup1