Re: [Bug 138873] Re: *** stack smashing detected ***: /sbin/wpa_supplicant terminated with iwl4965

2007-09-15 Thread Reinhard Tartler
Kees Cook [EMAIL PROTECTED] writes:

 wpasupplicant (0.6.0-3ubuntu1~ppa1) gutsy; urgency=low

   * Add debian/patches/90_fix_wext_tsf_stack_overflow.dpatch: correct
 buffer size limit on hexstr2bin call from wext_get_scan_custom
 (LP: #138873).

  -- Kees Cook [EMAIL PROTECTED]   Fri, 14 Sep 2007 23:08:25 -0700

The file debian/patches/90_fix_wext_tsf_stack_overflow.dpatch has the
following contents:

diff -urNad wpasupplicant-0.6.0~/src/drivers/driver_wext.c 
wpasupplicant-0.6.0/src/drivers/driver_wext.c
--- wpasupplicant-0.6.0~/src/drivers/driver_wext.c  2007-05-28 
10:26:55.0 -0700
+++ wpasupplicant-0.6.0/src/drivers/driver_wext.c   2007-09-14 
23:07:24.217713592 -0700
@@ -1380,6 +1380,7 @@
wpa_printf(MSG_INFO, Invalid TSF length (%d), bytes);
return;
}
+   bytes /= 2;
hexstr2bin(spos, bin, bytes);
res-tsf += WPA_GET_BE64(bin);

Can you please comment on it?
The complete query for this bugtrail can be found at here:

https://launchpad.net/bugs/138873

-- 
Gruesse/greetings,
Reinhard Tartler, KeyID 945348A4

-- 
*** stack smashing detected ***: /sbin/wpa_supplicant terminated with iwl4965
https://bugs.launchpad.net/bugs/138873
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


Re: [Bug 138873] Re: *** stack smashing detected ***: /sbin/wpa_supplicant terminated with iwl4965

2007-09-14 Thread Kees Cook
On Fri, Sep 14, 2007 at 11:19:56PM -, Darren Albers wrote:
 Here you go!   Let me know if this isn't what you are looking for.
 Thanks!

Hm, I don't think it was deleting the watch-point correctly.  Can you
try it again, and attach (as a file rather than a comment) the entire
gdb session?  Maybe using something like this:

sudo gdb $(pidof wpa_supplicant) 21 | tee /tmp/gdb.log

Then I can double-check the commands I gave you; in case I missed
something it should be more obvious.

Thanks!

-Kees

-- 
Kees Cook@outflux.net

-- 
*** stack smashing detected ***: /sbin/wpa_supplicant terminated with iwl4965
https://bugs.launchpad.net/bugs/138873
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


Re: [Bug 138873] Re: *** stack smashing detected ***: /sbin/wpa_supplicant terminated with iwl4965

2007-09-12 Thread Kees Cook
On Tue, Sep 11, 2007 at 11:20:10PM -, Darren Albers wrote:
 I am not sure how useful this is going to be but here you go.

Thanks for doing this.  Yeah, it's going to be tricky (since the stack
is, well, smashed).  Hopefully it will help track it down.

-- 
*** stack smashing detected ***: /sbin/wpa_supplicant terminated with iwl4965
https://bugs.launchpad.net/bugs/138873
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


Re: [Bug 138873] Re: *** stack smashing detected ***: /sbin/wpa_supplicant terminated with iwl4965

2007-09-11 Thread Reinhard Tartler
Alexander Sack [EMAIL PROTECTED] writes:

 siretart ... ever seen something like this before?

Err, sorry. nope :(

-- 
Gruesse/greetings,
Reinhard Tartler, KeyID 945348A4

-- 
*** stack smashing detected ***: /sbin/wpa_supplicant terminated with iwl4965
https://bugs.launchpad.net/bugs/138873
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs