Bug 22491

Summary:	ntopng crashes (* buffer overflow detected *: /usr/sbin/ntopng terminated)
Product:	Mageia	Reporter:	DariuszSki <linuxstuff>
Component:	RPM Packages	Assignee:	Stig-Ørjan Smelror <smelror>
Status:	RESOLVED FIXED	QA Contact:
Severity:	normal
Priority:	Normal	CC:	marja11, oe, pkg-bugs
Version:	6
Target Milestone:	---
Hardware:	x86_64
OS:	Linux
Whiteboard:
Source RPM:	ntopng	CVE:
Status comment:

Description DariuszSki 2018-01-30 16:48:43 CET

Description of problem:

My syslog fills up with a lot of..


ntopng[xxxx]: *** buffer overflow detected ***: /usr/sbin/ntopng terminated

Jan 30 14:58:09 local ntopng[1964]: ======= Backtrace: =========
Jan 30 14:58:09 local ntopng[1964]: /lib64/libc.so.6(+0x72435)[0x7fdf024a2435]
Jan 30 14:58:09 local ntopng[1964]: /lib64/libc.so.6(__fortify_fail+0x37)[0x7fdf02537337]
Jan 30 14:58:09 local ntopng[1964]: /lib64/libc.so.6(+0x105440)[0x7fdf02535440]
Jan 30 14:58:09 local ntopng[1964]: /usr/sbin/ntopng[0x43f8e8]
Jan 30 14:58:09 local ntopng[1964]: /usr/sbin/ntopng[0x43fa0d]
Jan 30 14:58:09 local ntopng[1964]: /usr/sbin/ntopng[0x41fa58]
Jan 30 14:58:09 local ntopng[1964]: /usr/sbin/ntopng[0x40b300]
Jan 30 14:58:09 local ntopng[1964]: /lib64/libc.so.6(__libc_start_main+0xf0)[0x7fdf02450600]
Jan 30 14:58:09 local ntopng[1964]: /usr/sbin/ntopng[0x40b709]
Jan 30 14:58:09 local ntopng[1964]: ======= Memory map: ========

Version-Release number of selected component (if applicable):
Mageia 6

How reproducible:
Just do a normal boot into the system, nothing to do with the user.

Comment 1 DariuszSki 2018-01-30 16:54:15 CET

Forgot to mention, it's a clean install of Mageia 6, x86_64 version, not installed any 32bit stuff on the system / 32bit disabled in repos.

Hardware: All => x86_64

Comment 2 Marja Van Waes 2018-01-31 12:29:27 CET

@ DariuszSki


What is the output of:

   rpm -qa ntopng


Assigning to kekePower, who last touched this package, because the registered maintainer seems unavailable. 

CC'ing the registered  maintainer

CC: (none) => marja11, oe, pkg-bugs
Assignee: bugsquad => smelror
Summary: ntopng crashes => ntopng crashes (*** buffer overflow detected ***: /usr/sbin/ntopng terminated)

Comment 3 Marja Van Waes 2018-01-31 13:50:12 CET


The registered maintainer of this package, Oden, said on IRC that if a software upgrade does't help, then don't use fortify source and other hardening techniques.

Comment 4 DariuszSki 2018-01-31 14:12:35 CET

(In reply to Marja van Waes from comment #2)
> @ DariuszSki
> 
> 
> What is the output of:
> 
>    rpm -qa ntopng
> 
> 
> Assigning to kekePower, who last touched this package, because the
> registered maintainer seems unavailable. 
> 
> CC'ing the registered  maintainer

ntopng-2.0-6.mga6

Comment 5 DariuszSki 2018-01-31 14:14:06 CET

(In reply to Marja van Waes from comment #3)
> 
> The registered maintainer of this package, Oden, said on IRC that if a
> software upgrade does't help, then don't use fortify source and other
> hardening techniques.

This is a clean / regular install of Mageia, I don't know what "fortify source" or "hardening techniques" are.

Comment 6 Stig-Ørjan Smelror 2018-01-31 14:17:59 CET

Hi.

You're using the version before I touched anything. The version I touched is in core/updates_testing, ntopng-2.0-6.2.mga6.
So this error has to come from somewhere else. Some other library that's been updated since mga6 was first released.

Even recompiling version 2.0 produces this crash.

I see the core dump as well, but managed to get it to run with

/usr/sbin/ntopng -i <interface>

I have no idea why it's crashing like it is, but I'm trying to get an update up and running.

Cheers,
Stig

Comment 7 Stig-Ørjan Smelror 2018-01-31 16:06:31 CET

Hi.

I've pushed updates for MGA6 to updates_testing.

You can either wait for QA to go through their testing and then push them to core/updates or you can enable updates_testing and install the updates.

See https://bugs.mageia.org/show_bug.cgi?id=22497


Cheers,
Stig

Comment 8 Stig-Ørjan Smelror 2018-02-06 09:51:01 CET

Hi.

A new version has been validated and pushed to Mageia 6 updates.

Cheers,
Stig

Status: NEW => RESOLVED
Resolution: (none) => FIXED