[Drbd-dev] [Igor Genibel] Bug#310993: reproductible segfault when parsing the config file

[Cyril Bouthors]

Skipped content of type multipart/mixed-------------- next part --------------
Package: drbd0.7-utils
Version: 0.7.10-3
Severity: normal

Hi,

It seems that the config file size is limited around 4798 bytes. This
really strange.
Here are to two config files that only differ from one byte.
With the first one (named first) here is the strace output:
[...]
open("/etc/drbd-07.conf", O_RDONLY)     = -1 ENOENT (No such file or
directory)
open("/etc/drbd.conf", O_RDONLY)        = 3
ioctl(3, SNDCTL_TMR_TIMEBASE or TCGETS, 0xbffff078) = -1 ENOTTY
(Inappropriate ioctl for device)
fstat64(3, {st_mode=S_IFREG|0644, st_size=4598, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0xb7fe8000
read(3, "# \n#    on-io-error pass_on;\n#  "..., 8192) = 4598
read(3, "", 4096)                       = 0
--- SIGSEGV (Segmentation fault) @ 0 (0) ---
+++ killed by SIGSEGV +++

With the second one (named second) here is the strace output:
[...]
write(2, "/dev/drbd0", 10/dev/drbd0)              = 10
write(2, " ", 1 )                        = 1
write(2, "primary", 7primary)                  = 7
write(2, "\' terminated with exit code 20\n", 31' terminated with exit
code 20
) = 31
write(2, "drbdadm aborting\n", 17drbdadm aborting
)      = 17
exit_group(20)                          = ?

It exists abnormaly because of the tests. If I use the initscript it
works well with the second config file.


-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.11-1-686
Locale: LANG=fr_FR at euro, LC_CTYPE=fr_FR at euro (charmap=ISO-8859-15)

Versions of packages drbd0.7-utils depends on:
ii  debconf                       1.4.49     Debian configuration management sy

-- no debconf information
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 1.drbd.conf.gz
Type: application/octet-stream
Size: 351 bytes
Desc: not available
Url : http://lists.linbit.com/pipermail/drbd-dev/attachments/20050530/b4610ecc/1.drbd.conf.obj
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 2.drbd.conf.gz
Type: application/octet-stream
Size: 350 bytes
Desc: not available
Url : http://lists.linbit.com/pipermail/drbd-dev/attachments/20050530/b4610ecc/2.drbd.conf.obj