Your message dated Sat, 02 Jan 2016 18:21:23 +0000
with message-id <[email protected]>
and subject line Bug#808333: fixed in transmission 2.84-3
has caused the Debian Bug report #808333,
regarding transmission-daemon: SIGSEGV due to racing in list node allocation
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
808333: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=808333
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: transmission-daemon
Version: 2.84-0.2
Severity: normal
Tags: patch upstream fixed-upstream

Dear Maintainer,

transmission-daemon died on SIGSEGV (probably triggered by starting torrent with webseed), backtrace seems same as in upstream ticket
https://trac.transmissionbt.com/ticket/5735
and it was fixed in upstream/trunk:
https://trac.transmissionbt.com/changeset/14319
I guess, it will be included in yet-to-be-released 2.90, upstream patch attached. Ticket suggests this bug affects other variants of transmission as well (gtk and qt).

I don't see serious security implications (DoS at worst); but crashes are annoying and fix is trivial, so maybe it worth fixing for next jessie point release.

-- System Information:
Debian Release: 8.1
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: i386 (x86_64)
Foreign Architectures: amd64

Kernel: Linux 3.16.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=ru_RU.KOI8-R, LC_CTYPE=ru_RU.KOI8-R (charmap=KOI8-R)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages transmission-daemon depends on:
ii  adduser              3.113+nmu3
ii  init-system-helpers  1.22
ii  libc6                2.19-18
ii  libcurl3-gnutls      7.38.0-4+deb8u2
ii  libevent-2.0-5       2.0.21-stable-2
ii  libminiupnpc10       1.9.20140610-2
ii  libnatpmp1           20110808-3
ii  libssl1.0.0          1.0.1k-3+deb8u1
ii  libsystemd0          215-17+deb8u1
ii  lsb-base             4.1+Debian13+nmu1
ii  transmission-common  2.84-0.2
ii  zlib1g               1:1.2.8.dfsg-2+b1

Versions of packages transmission-daemon recommends:
ii  transmission-cli  2.84-0.2

transmission-daemon suggests no packages.

-- Configuration Files:
/etc/transmission-daemon/settings.json [Errno 13] Permission denied: u'/etc/transmission-daemon/settings.json'

-- no debconf information

(gdb) bt
#0  node_alloc () at list.c:43
#1  0xf7788d5d in tr_list_append (list=0xf77ea7a4 <paused_easy_handles>, 
    data=0xf3894a18) at list.c:99
#2  0xf777b337 in writeFunc (ptr=0xf38f9208, size=1, nmemb=16384, 
vtask=0xf6359e00)
    at web.c:127
#3  0xf763a943 in ?? () from /usr/lib/i386-linux-gnu/libcurl-gnutls.so.4
#4  0xf764fc01 in curl_easy_pause () from 
/usr/lib/i386-linux-gnu/libcurl-gnutls.so.4
#5  0xf777b80b in tr_webThreadFunc (vsession=0xf8f8ae80) at web.c:448
#6  0xf775fac9 in ThreadFunc (_t=0xf6316218) at platform.c:105
#7  0xf73ffefb in start_thread (arg=0xf62ffb40) at pthread_create.c:309
#8  0xf733862e in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:129
(gdb) p ret  
$1 = (tr_list *) 0x0
(gdb) p recycled_nodes 
$2 = (tr_list *) 0x0 

--- a/libtransmission/list.c	(revision 14318)
+++ b/libtransmission/list.c	(revision 14319)
@@ -30,20 +30,24 @@
 static tr_list*
 node_alloc (void)
 {
-  tr_list * ret;
+  tr_list * ret = NULL;
+  tr_lock * lock = getRecycledNodesLock ();
 
-  if (recycled_nodes == NULL)
+  tr_lockLock (lock);
+
+  if (recycled_nodes != NULL)
     {
-      ret = tr_new (tr_list, 1);
-    }
-  else
-    {
-      tr_lockLock (getRecycledNodesLock ());
       ret = recycled_nodes;
       recycled_nodes = recycled_nodes->next;
-      tr_lockUnlock (getRecycledNodesLock ());
     }
 
+  tr_lockUnlock (lock);
+
+  if (ret == NULL)
+    {
+      ret = tr_new (tr_list, 1);
+    }
+
   *ret = TR_LIST_CLEAR;
   return ret;
 }
@@ -51,13 +55,15 @@
 static void
 node_free (tr_list* node)
 {
+  tr_lock * lock = getRecycledNodesLock ();
+
   if (node != NULL)
     {
       *node = TR_LIST_CLEAR;
-      tr_lockLock (getRecycledNodesLock ());
+      tr_lockLock (lock);
       node->next = recycled_nodes;
       recycled_nodes = node;
-      tr_lockUnlock (getRecycledNodesLock ());
+      tr_lockUnlock (lock);
     }
 }
 


--- End Message ---
--- Begin Message ---
Source: transmission
Source-Version: 2.84-3

We believe that the bug you reported is fixed in the latest version of
transmission, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Sandro Tosi <[email protected]> (supplier of updated transmission package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Sat, 02 Jan 2016 17:54:56 +0000
Source: transmission
Binary: transmission transmission-common transmission-dbg transmission-cli 
transmission-gtk transmission-qt transmission-daemon
Architecture: source amd64 all
Version: 2.84-3
Distribution: unstable
Urgency: medium
Maintainer: Sandro Tosi <[email protected]>
Changed-By: Sandro Tosi <[email protected]>
Description:
 transmission - lightweight BitTorrent client
 transmission-cli - lightweight BitTorrent client (command line programs)
 transmission-common - lightweight BitTorrent client (common files)
 transmission-daemon - lightweight BitTorrent client (daemon)
 transmission-dbg - lightweight BitTorrent client (debug symbols)
 transmission-gtk - lightweight BitTorrent client (GTK+ interface)
 transmission-qt - lightweight BitTorrent client (Qt interface)
Closes: 801299 801300 808333
Changes:
 transmission (2.84-3) unstable; urgency=medium
 .
   * [6b8bb2a] fix a SIGSEGV due to racing in list node allocation;
     Closes: #808333
   * [40ec5cb] remove libappindicator3-dev from b-d; Closes: #801299
   * [7ceb8fe] Fix black lines to be rendered when scrolling; Closes: #801300
Checksums-Sha1:
 8cc862043f2162b5d68192facc1f4eef2dbbef83 2657 transmission_2.84-3.dsc
 ab1bf316167b4c99b803bc30e1661ce632a534ce 19748 
transmission_2.84-3.debian.tar.xz
 201e9a0b2ce326461a82871db8a9617531774121 393374 
transmission-cli_2.84-3_amd64.deb
 b92085c8dc1f3c256754adacce8e2571845d5e70 257372 
transmission-common_2.84-3_all.deb
 cc4d570dc0a3ebbfbe4096eaad532436a8cd4eeb 210478 
transmission-daemon_2.84-3_amd64.deb
 873ebf2ec37e9e4ca8cf426e6d378d7ef7f640a3 7007362 
transmission-dbg_2.84-3_amd64.deb
 c334b7c3ae2b8d456d6bcf67c16043fd1e463741 691026 
transmission-gtk_2.84-3_amd64.deb
 b56ee16c910f32d6404ea707c41125286e1d0208 585656 
transmission-qt_2.84-3_amd64.deb
 d1ea52eb9d32fb3d8dad1c60d938b21f3d092566 1142 transmission_2.84-3_all.deb
Checksums-Sha256:
 8c92fe44c4ca551cf7f90bc0b9e25b27fc02e9e14dda7a1900616f19bd996371 2657 
transmission_2.84-3.dsc
 eafbf1efd4a0d023b93f9540a189288c0185ee33478a5e13b7bb97820e0a5565 19748 
transmission_2.84-3.debian.tar.xz
 1c63c0e647bfd6862b055685f5ee59b7273bc0fb7000aa8b74343554b49fa20c 393374 
transmission-cli_2.84-3_amd64.deb
 960142c7e1e52741861638999a6e883ce4de49fac0e9a05823560b495a84cbd6 257372 
transmission-common_2.84-3_all.deb
 a2c1eec384cfff2d3945f868e7661c48afaca329be90908aee5d5ebd08f3d23f 210478 
transmission-daemon_2.84-3_amd64.deb
 aa161baf8443ecad092a77c0debe50a133c128160c6efe18a25cc5f0e1930068 7007362 
transmission-dbg_2.84-3_amd64.deb
 23965b74d802067d53575e3d7a94182d929d0d4d2e0485e0b02239f964fe6b6b 691026 
transmission-gtk_2.84-3_amd64.deb
 ea75e1d4e0691e114db26dd64554ec313d2a737cf7b981becdc6ec20f0dcb064 585656 
transmission-qt_2.84-3_amd64.deb
 669165593c365ea70eff2ea2d235499eed724a63d64c5e7cd19f4b81ef5dfb12 1142 
transmission_2.84-3_all.deb
Files:
 5619c544acbb7f0a7fd0e7fe03751794 2657 net optional transmission_2.84-3.dsc
 308d1d6c8b0a1b6ab08a241d55b7d9d9 19748 net optional 
transmission_2.84-3.debian.tar.xz
 7426ba614bdc84a78f5189113e1bb4fb 393374 net optional 
transmission-cli_2.84-3_amd64.deb
 d95b4af0989df6f158a6a5646ed3bd42 257372 net optional 
transmission-common_2.84-3_all.deb
 deaa7fa095d5af1dc6d70f8affac6e03 210478 net optional 
transmission-daemon_2.84-3_amd64.deb
 ba00945979f02f2062029616e668e450 7007362 debug extra 
transmission-dbg_2.84-3_amd64.deb
 22acd74a20820cbf9011416cffb42df5 691026 net optional 
transmission-gtk_2.84-3_amd64.deb
 1aa0b014a40c2d50eb8d49805eaf2a1e 585656 net optional 
transmission-qt_2.84-3_amd64.deb
 4ae3e01d5a36c920ae329a185b4c5c4b 1142 net optional transmission_2.84-3_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=EVlg
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to