Bug#512377: segmentation fault in telrcv()

[Anand (make others happy )]

Hi,

Yes, it is still happening to me, I am using Linux i686.

Thanks,
Anand

On Fri, Dec 4, 2009 at 9:50 PM, Alberto Gonzalez Iniesta 
a...@inittab.orgwrote:

 On Thu, Aug 06, 2009 at 01:34:03PM +0530, Anand (make others happy ) wrote:
  Hi,
 
 
  I can handle this NULL check but not sure of the root cause if this.
 Since I
  do not have much knowledge on telnetd code base, could you please help me
  out here. I am running netkit-telnet-0.17


 Hi, I cannot reproduce it, is it still happening to you? Which arch are
 you using?

 Thanks,

 Alberto

 --
 Alberto Gonzalez Iniesta| Formación, consultoría y soporte técnico
 agi@(inittab.org|debian.org)| en GNU/Linux y software libre
 Encrypted mail preferred| http://inittab.com

 Key fingerprint = 9782 04E7 2B75 405C F5E9  0C81 C514 AF8E 4BA4 01C3

Bug#512377: segmentation fault in telrcv()

[Anand (make others happy )]

Hi,

here is the actual backtrace..

Loaded symbols for /lib/ld-linux.so.2
#0  0x0804b15c in telrcv () at state.c:214
214  else ch = *slctab[SLC_EL].sptr;
(gdb) bt
#0  0x0804b15c in telrcv () at state.c:214
#1  0x0804d4e6 in ttloop () at utility.c:159
#2  0x08049fb5 in getterminaltype (name=0xbfbc38a0 ) at telnetd.c:453
#3  0x0804a42c in doit (who=0xbfbc3a10) at telnetd.c:670
#4  0x08049d3b in main (argc=0, argv=0xbfbc3a98, env=0xbfbc3a9c) at
telnetd.c:342
#5  0x4003c3b6 in object.2 () from /lib/libc.so.6
(gdb) f 0
#0  0x0804b15c in telrcv () at state.c:214
214  else ch = *slctab[SLC_EL].sptr;
(gdb) p slctab
$1 = {{defset = {flag = 0 '\000', val = 0 '\000'}, current = {flag = 0
'\000', val = 0 '\000'}, sptr = 0x0} repeats 19 times}
(gdb) p slctab[11]
$2 = {defset = {flag = 0 '\000', val = 0 '\000'}, current = {flag = 0
'\000', val = 0 '\000'}, sptr = 0x0}
(gdb) p slctab[11].sptr
$3 = (cc_t *) 0x0
(gdb)


I can handle this NULL check but not sure of the root cause if this. Since I
do not have much knowledge on telnetd code base, could you please help me
out here. I am running netkit-telnet-0.17

Thanks,
Anand

Bug#512377: Telnetd crash

[Anand (make others happy )]

Here is the unstripped back trace, your response is much appreciated..

Core was generated by `in.telnetd'.
Program terminated with signal 11, Segmentation fault.
#0  wontoption (option=1075141296) at state.c:736
736 state.c: No such file or directory.
in state.c
(gdb) bt full
#0  wontoption (option=1075141296) at state.c:736
No locals.
#1  0x0804d3a6 in printsub (direction=-8 'ø', pointer=0x40155ab0 8f\023,
length=-1080028972) at utility.c:779
i = 1073832844
#2  0x08049e0b in getterminaltype (name=0xbfa00ee0 ) at telnetd.c:502
first = \004\000\000\000üm\...@\002\000\000\000 \204\004\bÔe\...@v
¬Ü\006V¬Ü\006\200\016 ¿8d\...@\a\212\004\bõ²v\a\220\016 ¿4e\...@xk\001@
\000\016 ¿\200¡\025@
ò\005\b\001\000\000\000\001\000\000\000°\t ¿°\r ¿\000\004\000\000\200¡\...@º
\205\...@¨\016 ¿pv\005\b8\016 ¿°z\...@\210£\025@`\016 ¿H\016 ¿F¢\021@
`\016 ¿oà\...@d\016 ¿°Z\025@ g\...@\200\211\025@x\016 ¿°Z\025@
\001\000\000\000¸]\...@8d\001@\020ii\r\220\016 ¿\221Í\...@Ôe\001@0n\001@
\001\000\000\000\000\000\000\000...
last = è\003\000\000°z\...@è\f ¿±\217\t@
\000ö\005\bøñ\005\bç\003\000\000\n\000\000\000\001\000\000\000xk\001@
\222`\...@\004\000\000\000\001\000\000\000àñ\005\b\nm )b¨\t@
\004ò\005\b\227n\...@\210\r ¿b�...@\002\000\000\000øñ\005\bàñ\005\b6î\t@
\000ö\005\b\000ö\005\b(\r ¿\001\000\000\000èñ\a\bðû\001\000`?\...@°z\025@
`?\...@øõ\005\bh\r ¿¶�...@\000ö\005\b\000\000\000\000\000\000\000\000°z\025@
$ò\005\b\025\214\...@\230\r ¿Ð\r ¿\000ö\005\b\000\000\000\000\230n\...@îû\b@
\000ö\005\b\016Í\000@...
#3  0x0804a38c in telnet (f=-1080029104, p=-1080029104) at telnetd.c:887
ibits = {__fds_bits = {-1080029288, 1073831352, 1073833016,
225011984, -1080029264, 1073794449, 1073833428, 1073835568, 1, 1073831352,
1073833016, 225011984,
-1080029232, 1073794449, 1073833428, 1073835568, 1, 0, 1073833428,
1073835568, 1, 1073794318, 134552324, 134515446, 1073901508, 1075141296,
1073832844, -1080028972,
-1080029080, 1073794832, 1075141296, -1080029184}}
obits = {__fds_bits = {0, 1073835516, 2, 134514288, 1073833428,
174037700, 174037700, -1080029248, 1073833016, 134515446, 195464533,
-1080029232, 1073901508,
1073834872, 1073834872, 1074389890, 1073910436, 1073834872, 0,
134602840, 0, 1073831352, 1073834872, 225011984, -1080029312, 1073794449,
1073835284, 1073835760, 1, 2,
-1080029320, 6}}
xbits = {__fds_bits = {1, 0, 1, 1075141296, 1075153324, 1073794318,
134552220, 134515207, 1073890612, 1075141296, 1073832844, 1074071994,
1515458248, 134602776, 0,
1075141296, 1073832844, -1080028972, -1080029496, -1, 134544591,
-1080028972, -1080029192, 134521740, -1080029472, 134576288, -1080029192,
134521718, 1073956802,
1073918948, 1075153280, 13}}
c = 0
hifd = 1073833428
on = 1073835568
#4  0x08049c9b in getterminaltype (name=0x0) at telnetd.c:448
No locals.
#5  0x4003c3b6 in ?? ()
No symbol table info available.
(gdb)


Thanks,
Anand