Bug#969887: scdoc: segfault in parse_text

2020-09-29 Thread Bernhard Übelacker
More details here: https://drewdevault.com/2020/09/25/A-story-of-two-libcs.html
Some related discussion here: https://lists.sr.ht/~sircmpwn/public-inbox
An upstream patch here: 
https://git.sr.ht/~sircmpwn/scdoc/commit/26bbd972dd3bdc73baa9362a2794dfc3ec3ad085



Bug#969887: scdoc: segfault in parse_text

2020-09-08 Thread Luca Borzacchiello
Package: scdoc
Version: 1.11.0-1
Severity: normal

Dear Maintainer,
running scdoc with the attached file leads to a segfault.
To reproduce the issue: scdoc < crash

This is the stacktrace collected using asan on the latest git version 
(https://git.sr.ht/\~sircmpwn/scdoc commit 
1645e3c681d11d813a20294918af026b8810f023):

==26267==ERROR: AddressSanitizer: SEGV on unknown address 0x7f9925764184 (pc 
0x004c5d4d bp 0x0002 sp 0x7ffe7f8574d0 T0)
==26267==The signal is caused by a READ memory access.
0 0x4c5d4d in parse_text /scdoc/src/main.c:223:61
1 0x4c476c in parse_document /scdoc/src/main.c
2 0x4c3544 in main /scdoc/src/main.c:763:2
3 0x7f99252ab0b2 in __libc_start_main 
/build/glibc-YYA7BZ/glibc-2.31/csu/../csu/libc-start.c:308:16
4 0x41b3fd in _start (/scdoc/scdoc+0x41b3fd)

--
Regards,
Luca Borzacchiello

-- System Information:
Debian Release: 10.5
  APT prefers testing
  APT policy: (500, 'testing'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 5.4.0-42-generic (SMP w/12 CPU cores)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, 
TAINT_UNSIGNED_MODULE
Locale: LANG=C, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE=C (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: unable to detect

Versions of packages scdoc depends on:
ii  libc6  2.28-10

scdoc recommends no packages.

scdoc suggests no packages.

-- no debconf information


crash
Description: Binary data