[Bug 2061667] Re: Noble 'autofs' 5.1.9-1ubuntu3 buffer overflow

2024-04-17 Thread Launchpad Bug Tracker
This bug was fixed in the package autofs - 5.1.9-1ubuntu4 --- autofs (5.1.9-1ubuntu4) noble; urgency=medium * d/p/adjust-buffer-size-for-snprintf.patch: fix buffer size when appending to a string (LP: #2061667) -- Andreas Hasenack Wed, 17 Apr 2024 11:47:05 -0300 ** Changed

[Bug 2061667] Re: Noble 'autofs' 5.1.9-1ubuntu3 buffer overflow

2024-04-17 Thread Andreas Hasenack
This was uploaded and is in noble-unapproved. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2061667 Title: Noble 'autofs' 5.1.9-1ubuntu3 buffer overflow To manage notifications about this bug go

[Bug 2061667] Re: Noble 'autofs' 5.1.9-1ubuntu3 buffer overflow

2024-04-17 Thread Andreas Hasenack
Thanks for verifying it. This is up for review and as soon as it's approved I'll upload. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2061667 Title: Noble 'autofs' 5.1.9-1ubuntu3 buffer overflow

[Bug 2061667] Re: Noble 'autofs' 5.1.9-1ubuntu3 buffer overflow

2024-04-17 Thread Peter Grandi
«In the meantime, you can also try debuginfod» Interesting, thanks for mentioning this. «reproduce it finally after I added "strictexpire" to /etc/auto.master» That is really weird, I think I was not using that (or "ignore"). Your intuition that was a factor seems to have worked because: «PPA

[Bug 2061667] Re: Noble 'autofs' 5.1.9-1ubuntu3 buffer overflow

2024-04-17 Thread Launchpad Bug Tracker
** Merge proposal linked: https://code.launchpad.net/~ahasenack/ubuntu/+source/autofs/+git/autofs/+merge/464560 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2061667 Title: Noble 'autofs'

[Bug 2061667] Re: Noble 'autofs' 5.1.9-1ubuntu3 buffer overflow

2024-04-17 Thread Andreas Hasenack
** Tags added: server-todo -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2061667 Title: Noble 'autofs' 5.1.9-1ubuntu3 buffer overflow To manage notifications about this bug go to:

[Bug 2061667] Re: Noble 'autofs' 5.1.9-1ubuntu3 buffer overflow

2024-04-17 Thread Andreas Hasenack
This PPA has a patched version for noble, would you mind trying it out please? https://launchpad.net/~ahasenack/+archive/ubuntu/autofs-segfault-2061667 ** Changed in: autofs (Ubuntu) Status: Triaged => In Progress ** Also affects: autofs (Ubuntu Noble) Importance: High

[Bug 2061667] Re: Noble 'autofs' 5.1.9-1ubuntu3 buffer overflow

2024-04-17 Thread Andreas Hasenack
I managed to reproduce it finally after I added "strictexpire" to /etc/auto.master -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2061667 Title: Noble 'autofs' 5.1.9-1ubuntu3 buffer overflow To

[Bug 2061667] Re: Noble 'autofs' 5.1.9-1ubuntu3 buffer overflow

2024-04-17 Thread Andreas Hasenack
And your second reproducer, with /mp in auto.master, doesn't work here: # ls -la /mp/mumon/_. ls: cannot access '/mp/mumon/_.': No such file or directory handle_packet: type = 3 handle_packet_missing_indirect: token 43, name mumon, request pid 4242 attempting to mount entry /mp/mumon

[Bug 2061667] Re: Noble 'autofs' 5.1.9-1ubuntu3 buffer overflow

2024-04-17 Thread Andreas Hasenack
Which kernel are you running? There are some kernel version checks in the code which affect a buffer size, and that's a buffer that make_options_string() writes to. I haven't been able to reproduce this yet, with any of your config files. I'm on noble's kernel: 6.8.0-22 -- You received this bug

[Bug 2061667] Re: Noble 'autofs' 5.1.9-1ubuntu3 buffer overflow

2024-04-17 Thread Andreas Hasenack
** Changed in: autofs (Ubuntu) Status: Incomplete => Triaged ** Changed in: autofs (Ubuntu) Importance: Undecided => High ** Changed in: autofs (Ubuntu) Assignee: (unassigned) => Andreas Hasenack (ahasenack) -- You received this bug notification because you are a member of

[Bug 2061667] Re: Noble 'autofs' 5.1.9-1ubuntu3 buffer overflow

2024-04-17 Thread Peter Grandi
SO I have cut down the configuration files to a minimum: petal# cat /etc/auto.master #DIR[TYPE[,FORMAT]:]MAP [OPTIONS] /- file,sun:/etc/auto.mp petal# cat /etc/auto.mp # vim:set ft=conf sw=2 noet nowrap: /mp/mumon/._

[Bug 2061667] Re: Noble 'autofs' 5.1.9-1ubuntu3 buffer overflow

2024-04-17 Thread Andreas Hasenack
Thanks for this, I know better where to look now. The config files or a minimal reproducer would still help, of course. In the meantime, you can also try debuginfod[1], which is a way for gdb to automatically fetcl all the symbols for you. TL;DR Something like this sudo -i (because automounter

[Bug 2061667] Re: Noble 'autofs' 5.1.9-1ubuntu3 buffer overflow

2024-04-17 Thread Peter Grandi
I will add the config files later. In the meantime this might be useful, a baxcktrace under 'gdb': *** buffer overflow detected ***: terminated Thread 5 "automount" received signal SIGABRT, Aborted. [Switching to Thread 0x73e706c0 (LWP 119683)] __pthread_kill_implementation (no_tid=0,

[Bug 2061667] Re: Noble 'autofs' 5.1.9-1ubuntu3 buffer overflow

2024-04-16 Thread Andreas Hasenack
Tried direct and indirect nfs mounts, and the test suite also does nfs and cifs mounts, no segfault: root@server:~# automount -d3 -f Starting automounter version 5.1.9, master map /etc/auto.master using kernel protocol version 5.05 lookup_nss_read_master: reading master file /etc/auto.master

[Bug 2061667] Re: Noble 'autofs' 5.1.9-1ubuntu3 buffer overflow

2024-04-16 Thread Lucas Kanashiro
Thanks for taking the time to report this bug and trying to make Ubuntu better. Could you please share your config files so we can try to reproduce the bug locally? ** Changed in: autofs (Ubuntu) Status: New => Incomplete -- You received this bug notification because you are a member of