Re: Buffer overflow with libmysql.so

[Klaus Kuusela]

2007/7/8, Pawel Kot <address@hidden>:

Hi,

On 7/8/07, Klaus Kuusela <address@hidden> wrote:
> ======= Backtrace: =========
> /lib/libc.so.6(__chk_fail+0x41)[0x41b7ece1]
> /lib/libc.so.6[0x41b7e3dc]
> /usr/local/lib/smsd/libmysql.so(DB_Look+0x289)[0x4a5e59]
> smsd[0x8049ac4]
> /lib/libpthread.so.0[0x41c272fb]
>
> /lib/libc.so.6(clone+0x5e)[0x41b6a93e]

Please provide backtrace from gdb. I am unable to read this.

> Here comes question:
>
> We know that smsd will crash (with buffer overflow) somehere: "GNOKII_API
> void DB_Look" (smsd/mysql.c)
>
> in case of it has got match with time periods (mysql results).
>
> I'm just too tired to see, where's is the beef ? (problem that causes buffer
> overflow) ;(
>
> Could someone help me ?

ANd why don't you provide *ANY* useful information? How could we guess
which gnokii version do you use? What is your gnokii setup? What is
gnokii debug log? Did you read gnokii documentation? Theres Bugs file
which tells how to report bugs.

Sorry ... Here's new try:

- phone: nokia 6150 (6110 series)
- connection: serial (DAU9P)
- gnokii: GNOKII Version 20070708 (source: CVS (from today Jul 8 2007))
- smsd/mysql.c: Id: mysql.c,v 1.34 2007/07/07 15:52:14 pkot Exp

STARTED WITH COMMAND; smsd --user smsd --db smsd --host 127.0.0.1 --module mysql

RESULTS AFTER PROGRAM TRIES TO GET MYSQL (outbox -table) ROW:

*** buffer overflow detected ***: smsd terminated
======= Backtrace: =========
/lib/libc.so.6(__chk_fail+0x41)[0x41b7ece1]
/lib/libc.so.6[0x41b7e3dc]
/usr/local/lib/smsd/libmysql.so(DB_Look+0x289)[0x320e59]
smsd[0x8049ac4]
/lib/libpthread.so.0[0x41c272fb]
/lib/libc.so.6(clone+0x5e)[0x41b6a93e]
======= Memory map: ========
00110000-00112000 r-xp 00000000 fd:00 13600376   /lib/libcom_err.so.2.1
00112000-00113000 rwxp 00001000 fd:00 13600376   /lib/libcom_err.so.2.1
00165000-00166000 r-xp 00165000 00:00 0          [vdso]
00166000-001f6000 r-xp 00000000 fd:00 5844217    /usr/lib/libkrb5.so.3.3
001f6000-001f9000 rwxp 0008f000 fd:00 5844217    /usr/lib/libkrb5.so.3.3
00320000-00323000 r-xp 00000000 fd:00 5999689    /usr/local/lib/smsd/libmysql.so
00323000-00324000 rwxp 00002000 fd:00 5999689    /usr/local/lib/smsd/libmysql.so
00859000-00863000 r-xp 00000000 fd:00 13598761   /lib/libnss_files-2.6.so
00863000-00864000 r-xp 00009000 fd:00 13598761   /lib/libnss_files- 2.6.so
00864000-00865000 rwxp 0000a000 fd:00 13598761   /lib/libnss_files-2.6.so
00b1f000-00b83000 r-xp 00000000 fd:00 5844812    /usr/local/lib/libgnokii.so.3.2.0
00b83000-00b87000 rwxp 00064000 fd:00 5844812    /usr/local/lib/libgnokii.so.3.2.0
00b87000-00b90000 rwxp 00b87000 00:00 0
08048000-0804c000 r-xp 00000000 fd:00 5844819    /usr/local/sbin/smsd
0804c000-0804d000 rwxp 00004000 fd:00 5844819    /usr/local/sbin/smsd
0804d000-08056000 rwxp 0804d000 00:00 0
08b64000-08ba6000 rwxp 08b64000 00:00 0
41a7b000-41a96000 r-xp 00000000 fd:00 13598824   /lib/ld-2.6.so
41a96000-41a97000 r-xp 0001a000 fd:00 13598824   /lib/ld- 2.6.so
41a97000-41a98000 rwxp 0001b000 fd:00 13598824   /lib/ld-2.6.so
41a9a000-41be8000 r-xp 00000000 fd:00 13598843   /lib/libc-2.6.so
41be8000-41bea000 r-xp 0014e000 fd:00 13598843   /lib/libc-2.6.so
41bea000-41beb000 rwxp 00150000 fd:00 13598843   /lib/libc-2.6.so
41beb000-41bee000 rwxp 41beb000 00:00 0
41bf0000-41bf3000 r-xp 00000000 fd:00 13598857   /lib/libdl-2.6.so
41bf3000-41bf4000 r-xp 00002000 fd:00 13598857   /lib/libdl-2.6.so
41bf4000-41bf5000 rwxp 00003000 fd:00 13598857   /lib/libdl- 2.6.so
41bf7000-41c1e000 r-xp 00000000 fd:00 13598852   /lib/libm-2.6.so
41c1e000-41c1f000 r-xp 00026000 fd:00 13598852   /lib/libm-2.6.so
41c1f000-41c20000 rwxp 00027000 fd:00 13598852   /lib/libm-2.6.so
41c22000-41c36000 r-xp 00000000 fd:00 13598845   /lib/libpthread-2.6.so
41c36000-41c37000 r-xp 00013000 fd:00 13598845   /lib/libpthread- 2.6.so
41c37000-41c38000 rwxp 00014000 fd:00 13598845   /lib/libpthread-2.6.so
41c38000-41c3a000 rwxp 41c38000 00:00 0
41c3c000-41c4e000 r-xp 00000000 fd:00 13598855   /lib/libz.so.1.2.3
41c4e000-41c4f000 rwxp 00011000 fd:00 13598855   /lib/libz.so.1.2.3
41c51000-41c66000 r-xp 00000000 fd:00 13598853   /lib/libnsl-2.6.so
41c66000-41c67000 r-xp 00014000 fd:00 13598853   /lib/libnsl- 2.6.so
41c67000-41c68000 rwxp 00015000 fd:00 13598853   /lib/libnsl-2.6.so
41c68000-41c6a000 rwxp 41c68000 00:00 0
41c6c000-41c73000 r-xp 00000000 fd:00 5836869    /usr/lib/libkrb5support.so.0.1
41c73000-41c74000 rwxp 00006000 fd:00 5836869    /usr/lib/libkrb5support.so.0.1
41c76000-41c78000 r-xp 00000000 fd:00 13598902   /lib/libkeyutils-1.2.so
41c78000-41c79000 rwxp 00001000 fd:00 13598902   /lib/libkeyutils- 1.2.so
41c7b000-41ca0000 r-xp 00000000 fd:00 5844216    /usr/lib/libk5crypto.so.3.1
41ca0000-41ca1000 rwxp 00025000 fd:00 5844216    /usr/lib/libk5crypto.so.3.1
41cb3000-41cbe000 r-xp 00000000 fd:00 13598866   /lib/libgcc_s- 4.1.2-20070503.so.1
41cbe000-41cbf000 rwxp 0000a000 fd:00 13598866   /lib/libgcc_s-4.1.2-20070503.so.1
41cc1000-41cc6000 r-xp 00000000 fd:00 13598887   /lib/libcrypt-2.6.so
41cc6000-41cc7000 r-xp 00004000 fd:00 13598887   /lib/libcrypt- 2.6.so
41cc7000-41cc8000 rwxp 00005000 fd:00 13598887   /lib/libcrypt-2.6.so
41cc8000-41cef000 rwxp 41cc8000 00:00 0
41de9000-41df9000 r-xp 00000000 fd:00 13599606   /lib/libresolv- 2.6.so
41df9000-41dfa000 r-xp 0000f000 fd:00 13599606   /lib/libresolv-2.6.so
41dfa000-41dfb000 rwxp 00010000 fd:00 13599606   /lib/libresolAborted