Control: severity -1 important
Control: notfound -1 0.9.44.10-1

Hi Sascha,

On Mon, May 08, 2017 at 12:20:41PM +0200, Sascha Silbe wrote:
> when passing --allow-debuggers to firejail to enable strace or gdb to
> work inside firejail (in order to figure out why the sandboxed
> application doesn't work), firejail crashes immediately on start-up:
> 
> sascha.silbe@twin:~$ firejail --allow-debuggers echo ok
> Reading profile /etc/firejail/default.profile
> Reading profile /etc/firejail/disable-common.inc
> Reading profile /etc/firejail/disable-programs.inc
> Reading profile /etc/firejail/disable-passwdmgr.inc
> 
> ** Note: you can use --noprofile to disable default.profile **
> 
> Parent pid 8465, child pid 8466
> *** Error in `firejail': free(): invalid pointer: 0x000055b39282d354 ***
> Error: cannot establish communication with the parent, exiting...
> sascha.silbe@twin:~$

Thank you for the report.

I was able to reproduce the issue in a jessie chroot with the bpo package.
After some debugging I found that it is a memory corruption in fs.c.
Fortunately it has also already been fixed upstream [1], which is
already part of 0.9.44.10-1.
I will cherry-pick the fix for (hopefully) stretch and backports.

Regards,
  Reiner

[1] 
https://github.com/netblue30/firejail/commit/b0cb1b40c3dd23e9584ab6b0686871ab02d298d0

Attachment: signature.asc
Description: Digital signature

Reply via email to