Bug 22491 - ntopng crashes (*** buffer overflow detected ***: /usr/sbin/ntopng terminated)
Summary: ntopng crashes (*** buffer overflow detected ***: /usr/sbin/ntopng terminated)
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: RPM Packages (show other bugs)
Version: 6
Hardware: x86_64 Linux
Priority: Normal normal
Target Milestone: ---
Assignee: Stig-Ørjan Smelror
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2018-01-30 16:48 CET by DariuszSki
Modified: 2018-02-06 09:51 CET (History)
3 users (show)

See Also:
Source RPM: ntopng
CVE:
Status comment:


Attachments

Description DariuszSki 2018-01-30 16:48:43 CET
Description of problem:

My syslog fills up with a lot of..


ntopng[xxxx]: *** buffer overflow detected ***: /usr/sbin/ntopng terminated

Jan 30 14:58:09 local ntopng[1964]: ======= Backtrace: =========
Jan 30 14:58:09 local ntopng[1964]: /lib64/libc.so.6(+0x72435)[0x7fdf024a2435]
Jan 30 14:58:09 local ntopng[1964]: /lib64/libc.so.6(__fortify_fail+0x37)[0x7fdf02537337]
Jan 30 14:58:09 local ntopng[1964]: /lib64/libc.so.6(+0x105440)[0x7fdf02535440]
Jan 30 14:58:09 local ntopng[1964]: /usr/sbin/ntopng[0x43f8e8]
Jan 30 14:58:09 local ntopng[1964]: /usr/sbin/ntopng[0x43fa0d]
Jan 30 14:58:09 local ntopng[1964]: /usr/sbin/ntopng[0x41fa58]
Jan 30 14:58:09 local ntopng[1964]: /usr/sbin/ntopng[0x40b300]
Jan 30 14:58:09 local ntopng[1964]: /lib64/libc.so.6(__libc_start_main+0xf0)[0x7fdf02450600]
Jan 30 14:58:09 local ntopng[1964]: /usr/sbin/ntopng[0x40b709]
Jan 30 14:58:09 local ntopng[1964]: ======= Memory map: ========

Version-Release number of selected component (if applicable):
Mageia 6

How reproducible:
Just do a normal boot into the system, nothing to do with the user.
Comment 1 DariuszSki 2018-01-30 16:54:15 CET
Forgot to mention, it's a clean install of Mageia 6, x86_64 version, not installed any 32bit stuff on the system / 32bit disabled in repos.

Hardware: All => x86_64

Comment 2 Marja Van Waes 2018-01-31 12:29:27 CET
@ DariuszSki


What is the output of:

   rpm -qa ntopng


Assigning to kekePower, who last touched this package, because the registered maintainer seems unavailable. 

CC'ing the registered  maintainer

CC: (none) => marja11, oe, pkg-bugs
Assignee: bugsquad => smelror
Summary: ntopng crashes => ntopng crashes (*** buffer overflow detected ***: /usr/sbin/ntopng terminated)

Comment 3 Marja Van Waes 2018-01-31 13:50:12 CET

The registered maintainer of this package, Oden, said on IRC that if a software upgrade does't help, then don't use fortify source and other hardening techniques.
Comment 4 DariuszSki 2018-01-31 14:12:35 CET
(In reply to Marja van Waes from comment #2)
> @ DariuszSki
> 
> 
> What is the output of:
> 
>    rpm -qa ntopng
> 
> 
> Assigning to kekePower, who last touched this package, because the
> registered maintainer seems unavailable. 
> 
> CC'ing the registered  maintainer

ntopng-2.0-6.mga6
Comment 5 DariuszSki 2018-01-31 14:14:06 CET
(In reply to Marja van Waes from comment #3)
> 
> The registered maintainer of this package, Oden, said on IRC that if a
> software upgrade does't help, then don't use fortify source and other
> hardening techniques.

This is a clean / regular install of Mageia, I don't know what "fortify source" or "hardening techniques" are.
Comment 6 Stig-Ørjan Smelror 2018-01-31 14:17:59 CET
Hi.

You're using the version before I touched anything. The version I touched is in core/updates_testing, ntopng-2.0-6.2.mga6.
So this error has to come from somewhere else. Some other library that's been updated since mga6 was first released.

Even recompiling version 2.0 produces this crash.

I see the core dump as well, but managed to get it to run with

/usr/sbin/ntopng -i <interface>

I have no idea why it's crashing like it is, but I'm trying to get an update up and running.

Cheers,
Stig
Comment 7 Stig-Ørjan Smelror 2018-01-31 16:06:31 CET
Hi.

I've pushed updates for MGA6 to updates_testing.

You can either wait for QA to go through their testing and then push them to core/updates or you can enable updates_testing and install the updates.

See https://bugs.mageia.org/show_bug.cgi?id=22497


Cheers,
Stig
Comment 8 Stig-Ørjan Smelror 2018-02-06 09:51:01 CET
Hi.

A new version has been validated and pushed to Mageia 6 updates.

Cheers,
Stig

Status: NEW => RESOLVED
Resolution: (none) => FIXED


Note You need to log in before you can comment on or make changes to this bug.