Your message dated Wed, 30 Apr 2014 15:38:27 +0000
with message-id <[email protected]>
and subject line Bug#746423: fixed in unixodbc 2.3.1-3
has caused the Debian Bug report #746423,
regarding Patch to unixodbc has non-threadsafe use of libltdl
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
746423: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=746423
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: unixodbc
Version: 2.2.14p2-5

Unixodbc is patched to use libltdl

The following stack trace shows a double free coming from lt_dlsetsearchpath()
when multithread usage of odbc is being done with FreeSWITCH



#0  0x00007f3aed113475 in raise () from /lib/x86_64-linux-gnu/libc.so.6
#1  0x00007f3aed1166f0 in abort () from /lib/x86_64-linux-gnu/libc.so.6
#2  0x00007f3aed14e52b in ?? () from /lib/x86_64-linux-gnu/libc.so.6
#3  0x00007f3aed157d76 in ?? () from /lib/x86_64-linux-gnu/libc.so.6
#4  0x00007f3aed15cb1c in free () from /lib/x86_64-linux-gnu/libc.so.6
#5  0x00007f3aeceddc65 in lt_dlsetsearchpath () from
/usr/lib/x86_64-linux-gnu/libltdl.so.7
#6  0x00007f3aeed9c103 in ?? () from /usr/lib/x86_64-linux-gnu/libodbc.so.1
#7  0x00007f3aeed9edfc in SQLConnect () from
/usr/lib/x86_64-linux-gnu/libodbc.so.1


According to the documentation at
http://www.delorie.com/gnu/docs/libtool/libtool_46.html

Note that libltdl is not threadsafe, i.e. a multithreaded application has
to use a mutex for libltdl. It was reported that GNU/Linux's glibc 2.0's
dlopen with `RTLD_LAZY' (which libltdl uses by default) is not thread-safe,
but this problem is supposed to be fixed in glibc 2.1. On the other hand,
`RTLD_NOW' was reported to introduce problems in multi-threaded
applications on FreeBSD. Working around these problems is left as an
exercise for the reader; contributions are certainly welcome.


I think the patch needs to be changed to use this lib with a mutex to avoid
memory corruption when concurrent calls to opening sql drivers are
performed in a multi-threaded app or the use of this libltdl should be
discontinued.




-- 
Anthony Minessale II       ♬ @anthmfs  ♬ @FreeSWITCH  ♬

☞ http://freeswitch.org/http://cluecon.com/http://twitter.com/FreeSWITCH
☞ irc.freenode.net #freeswitch ☞ *http://freeswitch.org/g+
<http://freeswitch.org/g+>*

ClueCon Weekly Development Call
☎ sip:[email protected]  ☎ +19193869900

--- End Message ---
--- Begin Message ---
Source: unixodbc
Source-Version: 2.3.1-3

We believe that the bug you reported is fixed in the latest version of
unixodbc, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Steve Langasek <[email protected]> (supplier of updated unixodbc package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Wed, 30 Apr 2014 00:35:50 +0000
Source: unixodbc
Binary: unixodbc libodbc1 unixodbc-dev odbcinst1debian2 odbcinst
Architecture: source amd64
Version: 2.3.1-3
Distribution: unstable
Urgency: low
Maintainer: Steve Langasek <[email protected]>
Changed-By: Steve Langasek <[email protected]>
Description: 
 libodbc1   - ODBC library for Unix
 odbcinst   - Helper program for accessing odbc ini files
 odbcinst1debian2 - Support library for accessing odbc ini files
 unixodbc   - Basic ODBC tools
 unixodbc-dev - ODBC libraries for UNIX (development files)
Closes: 746423
Changes: 
 unixodbc (2.3.1-3) unstable; urgency=low
 .
   * DriverManager/SQLConnect.c: put a mutex around the call to
     lt_dlsetsearchpath(), to avoid double-frees in a multithreaded context.
     Closes: #746423.
Checksums-Sha1: 
 939c3ce41404c1f191db371d8c9fa217c923f159 2120 unixodbc_2.3.1-3.dsc
 16dc0ca1c5cf0a7c55b1d4530f35c09c00c7204f 384313 unixodbc_2.3.1-3.diff.gz
 229d823212efa3f04f28026796bebeb4f1337c42 51858 unixodbc_2.3.1-3_amd64.deb
 cb58fc72eb3c4b381cd79177fba86d4d0cbd0244 205646 libodbc1_2.3.1-3_amd64.deb
 a52374c3846ffe22043ca2d3da50fb611a73f3e7 244826 unixodbc-dev_2.3.1-3_amd64.deb
 33a9472de1676e9e265fd2d7bfa7ee53e12466ee 72572 
odbcinst1debian2_2.3.1-3_amd64.deb
 e82f785eaa351b521cfd944ad477ecb3d41ff87d 41868 odbcinst_2.3.1-3_amd64.deb
Checksums-Sha256: 
 7b2284394aef9b0470602692773e9b1feb86ac162cbb5fd56171d496cc025139 2120 
unixodbc_2.3.1-3.dsc
 c31c93b6a23937a63eb28bb79ca858d3af0b25c9cb1bd71e092ac6daf71d424e 384313 
unixodbc_2.3.1-3.diff.gz
 742a32aedfa66fe62ebdf25fb0ba6aea18c31e1c56f1e171413f032e8496c858 51858 
unixodbc_2.3.1-3_amd64.deb
 be89131685dde9aaffcd65493222ece77df3eeb23fe2d4d3467bbbe14f59a68e 205646 
libodbc1_2.3.1-3_amd64.deb
 11ea4ea900d1136dc6ade4d45d891cae0c62df660d85670ca1645e72a7a6c36e 244826 
unixodbc-dev_2.3.1-3_amd64.deb
 81735ef04f880d0c22452ff4c8ee47c8ce7a11cd935d134cfbe426d3fb0ac32c 72572 
odbcinst1debian2_2.3.1-3_amd64.deb
 0cb6d1df9ce70d6c355641c46cf7e0855a57d1b2fa26dee2ee7e2627aa16b3dd 41868 
odbcinst_2.3.1-3_amd64.deb
Files: 
 6de4ebf9214114e61871d152f2ed206b 51858 database optional 
unixodbc_2.3.1-3_amd64.deb
 1a30dbfa09818108f7042e4fbb456f8f 205646 libs optional 
libodbc1_2.3.1-3_amd64.deb
 f9df4771b10b31852718ce92881bfacc 244826 devel extra 
unixodbc-dev_2.3.1-3_amd64.deb
 985e24a8a1ba076482ed08287779b6b0 72572 libs optional 
odbcinst1debian2_2.3.1-3_amd64.deb
 c10b8ebd037840c47f6a6ae5822dd2ef 41868 utils optional 
odbcinst_2.3.1-3_amd64.deb
 cae0dc08e532e75df112093a9b8edb3c 2120 libs optional unixodbc_2.3.1-3.dsc
 7a61f23c5e04954872b0350cd244215c 384313 libs optional unixodbc_2.3.1-3.diff.gz

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=Czaf
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to