View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0000791 | unreal | ircd | public | 2003-03-10 22:18 | 2003-11-20 19:46 |
| Reporter | Rocko | Assigned To | |||
| Priority | normal | Severity | crash | Reproducibility | always |
| Status | closed | Resolution | fixed | ||
| Product Version | 3.2-beta15 | ||||
| Summary | 0000791: Crash when using 'set::allow-userhost-change force-rejoin' | ||||
| Description | The IRCd crashes, when "set::allow-userhost-change force-rejoin" is defined and you try to change a userhost or set +/- x. | ||||
| Steps To Reproduce | Define "set::allow-userhost-change force-rejoin" in unrealircd.conf and change a userhost. | ||||
| Additional Information | Program terminated with signal 11, Segmentation fault. Reading symbols from /usr/lib/libssl.so.0.9.6...done. Loaded symbols for /usr/lib/libssl.so.0.9.6 Reading symbols from /usr/lib/libcrypto.so.0.9.6...done. Loaded symbols for /usr/lib/libcrypto.so.0.9.6 Reading symbols from /lib/libcrypt.so.1...done. Loaded symbols for /lib/libcrypt.so.1 Reading symbols from /lib/libnsl.so.1...done. Loaded symbols for /lib/libnsl.so.1 Reading symbols from /lib/libdl.so.2...done. Loaded symbols for /lib/libdl.so.2 Reading symbols from /lib/libpthread.so.0...done. Loaded symbols for /lib/libpthread.so.0 Reading symbols from /lib/libc.so.6...done. Loaded symbols for /lib/libc.so.6 Reading symbols from /lib/ld-linux.so.2...done. Loaded symbols for /lib/ld-linux.so.2 Reading symbols from src/modules/commands.so...done. Loaded symbols for src/modules/commands.so Reading symbols from src/modules/scan.so...done. Loaded symbols for src/modules/scan.so Reading symbols from src/modules/scan_socks.so...done. Loaded symbols for src/modules/scan_socks.so Reading symbols from src/modules/scan_http.so...done. Loaded symbols for src/modules/scan_http.so #0 0x080892dc in m_umode (cptr=???, sptr=???, parc=???, parv=???) at s_user.c:2507 2507 if ((setflags & (UMODE_OPER | UMODE_LOCOP)) && !IsAnOper(sptr) && (gdb) bt #0 0x080892dc in m_umode (cptr=???, sptr=???, parc=???, parv=???) at s_user.c:2507 Cannot access memory at address 0x0 | ||||
| 3rd party modules | |||||
|
|
Your gdb output is pretty weird hehe ;P. Can you mail the following (.tar.gz'd) to [email protected]: - the ircd binary (src/ircd) - the core file - the unrealircd.conf and any included files you use (without oper&link blocks and cloak keys removed). Thanks. |
|
|
No longer working at, no longer assigned, private->public. Bug may pretty well be grsec related. |
|
|
Well, the same for me... (I have just tried what Rocko said in 'Steps To Reproduce':) #0 m_sethost (cptr=???, sptr=???, parc=???, parv=???) at m_sethost.c:262 262 sendto_one(sptr, (gdb) bt #0 m_sethost (cptr=???, sptr=???, parc=???, parv=???) at m_sethost.c:262 Error accessing memory address 0x0: No such process. (gdb) edited on: 03-11 20:30 |
|
|
Syzop: did you try to test it yourself? I think it would do the same. |
|
|
Yes he had, but it didn´t crash. wierd. AngryWolf, which kernel do you have? You are having the grsec patch too? Paste "uname -a" here. |
|
|
No grsec, simply crashes... Linux wolf 2.4.18-4GB #1 Fri Apr 5 15:14:39 UTC 2002 i686 unknown |
|
|
I could reproduce your bug (/mode nick -x) and the same when doing /chghost, /sethost and /vhost |
|
|
Another crash at another system (RedHat 7.1): Linux ods.org 2.4.2-2 #1 Sun Apr 8 20:41:30 EDT 2001 i686 unknown The previous computer was SuSE 8.0 This is why I'm telling that just test it, Syzop ... |
|
|
same here: Core was generated by `/home/ipv6/Unreal/src/ircd'. Program terminated with signal 11, Segmentation fault. Reading symbols from /lib/libcrypt.so.1...done. Loaded symbols for /lib/libcrypt.so.1 Reading symbols from /lib/libnsl.so.1...done. Loaded symbols for /lib/libnsl.so.1 Reading symbols from /lib/libdl.so.2...done. Loaded symbols for /lib/libdl.so.2 Reading symbols from /lib/libc.so.6...done. Loaded symbols for /lib/libc.so.6 Reading symbols from /lib/ld-linux.so.2...done. Loaded symbols for /lib/ld-linux.so.2 Reading symbols from src/modules/commands.so...done. Loaded symbols for src/modules/commands.so #0 0x4008c781 in kill () from /lib/libc.so.6 (gdb) bt #0 0x4008c781 in kill () from /lib/libc.so.6 #1 0x08096619 in default_action () #2 0x080967bc in handle_thread_signal () #3 0x08096cd7 in handle_one_signal () #4 0x08096e4e in pthread_handle_one_process_signal () #5 0x080a0b56 in pthread_signal_sched () #6 0x080a0040 in pthread_sched_wrapper () #7 0x08097159 in sighandler () |
|
|
I found out something interesting: When I am in 3 channels or MORE, it rejoin all or a few channels and crash THEN. But when I am only in 2 or one, it crash IMMEDIATELY. Maybe this hint will help. |
|
|
Fixed in .1700 |
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2003-11-20 19:46 | syzop | Status | resolved => closed |
