Jaap Struyk wrote:
I managed to get a core-dump (wich is like arabic to me)
http://www.japie.deserver.nl/ftp/HLFS/mminfo.core.bz2 so I rebuild
Python with fno-stack-protector wich does work but leaves me with a
(potential) security risk.
But since Python is only used for freevo I can live
Jaap Struyk wrote:
Op vr 29-12-2006, om 15:34 schreef Duncan Webb:
This seems a fair enough solution, sorry we could not help more. Did you
check to see if there any known python bugs with stack-protector enabled.
There are more, some calls by python are interpreted as stack smash but
I tryed to debug any further:
(Pdb) n
/usr/bin/mminfo(89)?()
- medium = kaa.metadata.parse(file)
(Pdb) n
python: stack smashing attack in function PyEval_EvalFrame()
Aborted
So that didn't help, back to adding print statements to audioinfo.py
At the bottom I added:
mediainfo.EXTENSION_DEVICE
I have one stange thing to add to the trouble.
I installed kaa base and mediainfo on my workstation with the following
result:
japie:~$ mminfo /dev/cdrom
kaa media metadata info
filename : /dev/cdrom
title: Seresta
artist: Rosenberg Trio, The
type: CD
subtype:
Another addition: with -d 2 I got:
DEBUG factory(290): Trying audio/cd
python: stack smashing attack in function PyEval_EvalFrame()
Aborted
But with plain -d I get:
kaa media metadata info
Traceback (most recent call last):
File /usr/bin/mminfo, line 84, in ?
a = max(0, min(int(a), 2))
Jaap Struyk wrote:
Another addition: with -d 2 I got:
DEBUG factory(290): Trying audio/cd
python: stack smashing attack in function PyEval_EvalFrame()
Aborted
But with plain -d I get:
kaa media metadata info
Traceback (most recent call last):
File /usr/bin/mminfo, line 84, in ?
Jaap Struyk wrote:
Another addition: with -d 2 I got:
DEBUG factory(290): Trying audio/cd
python: stack smashing attack in function PyEval_EvalFrame()
Aborted
But with plain -d I get:
Should be -d 1
kaa media metadata info
Traceback (most recent call last):
File /usr/bin/mminfo,
Op za 16-12-2006, om 13:39 schreef Duncan Webb:
Should be -d 1
That works.
To find out whats going on I tryed all the .py scripts in the
/usr/lib/python2.4/site-packages/kaa/metadata/disc manualy, none of them
triggers the stack smashing protector.
Neither did mediainfo.py
Am I right that info
I added -fno-stack-protector-all to gcc when compiling the C parts
without luck, so whatever is happening it's not in the C code.
How can I add the printf to show me what's going on?
--
Groetjes Japie
-
Take Surveys. Earn
Op ma 11-12-2006, om 20:28 schreef Duncan Webb:
I just gave this a quick test, using 1.7 svn and it worked just fine.
Not much has changed since 1.5.4 with the audio handling, a couple of
fixes relating to how the titles are shown.
If freevo didn't change something else would so I tryed
Jaap Struyk wrote:
Op ma 11-12-2006, om 20:28 schreef Duncan Webb:
I just gave this a quick test, using 1.7 svn and it worked just fine.
Not much has changed since 1.5.4 with the audio handling, a couple of
fixes relating to how the titles are shown.
If freevo didn't change something else
Op di 12-12-2006, om 19:21 schreef Dirk Meyer:
That's all? Very strange. Please try
mminfo -d 2 /dev/dvd
Keeps the same,
python: stack smashing attack in function PyEval_EvalFrame()
right after
DEBUG factory(290): Trying audio/cd
No further info.
Unfortunatly debugging apps is hard since
Jaap Struyk wrote:
Unfortunatly debugging apps is hard since grsec prevents the app from
writing core files and showing other stuff.
In this case I get a signal 6 wich means sigabrt and a denied resource
overstep wich normaly means a coredump isn't allowed to be writen.
Is mminfo maybe
Op ma 20-11-2006, om 12:57 schreef Jaap Struyk:
Freevo crashes on inserting an audio cd:
I still weren't able to debug the problem, what is freevo doing when it
detects an audio cd?
vcd and dvd works fine so it isn't mmpython.
--
Groetjes Japie
Jaap Struyk wrote:
Op ma 20-11-2006, om 12:57 schreef Jaap Struyk:
Freevo crashes on inserting an audio cd:
Freevo 1.6.0 or 1.6.1?
I still weren't able to debug the problem, what is freevo doing when it
detects an audio cd?
vcd and dvd works fine so it isn't mmpython.
Duncan
Op ma 11-12-2006, om 18:53 schreef Duncan Webb:
Freevo 1.6.0 or 1.6.1?
1.6.1
My system uses grsec/pax/ssp so it's a bit strict on what's excecuted.
In the past 1.5 series it has worked but since grsec is also regulary
updated I have no clue or 1.5.x would still work.
I only play audio cd once
Jaap Struyk wrote:
Op ma 11-12-2006, om 18:53 schreef Duncan Webb:
Freevo 1.6.0 or 1.6.1?
1.6.1
My system uses grsec/pax/ssp so it's a bit strict on what's excecuted.
In the past 1.5 series it has worked but since grsec is also regulary
updated I have no clue or 1.5.x would still work.
17 matches
Mail list logo
