Package: ircd-hybrid
Version: 1:8.2.24+dfsg.1-1
Severity: grave

Hi,

I just upgraded to buster and ircd keeps crashing.
One case with a segfault in strcmp, other times with glibc aborts.

Running with valgrind shows:

==4562== Invalid read of size 8
==4562==    at 0x127E10: dlinkDelete (list.c:125)
==4562==    by 0x12C7FB: rem_request (res.c:107)
==4562==    by 0x12C7FB: res_readreply (res.c:627)
==4562==    by 0x12B706: comm_select (s_bsd_epoll.c:153)
==4562==    by 0x11325B: io_loop (ircd.c:181)
==4562==    by 0x11325B: main (ircd.c:491)
==4562==  Address 0xf82e610 is 16 bytes inside a block of size 472 free'd
==4562==    at 0x48369AB: free (vg_replace_malloc.c:530)
==4562==    by 0x12CBAA: rem_request (res.c:108)
==4562==    by 0x12CBAA: delete_resolver_queries (res.c:230)
==4562==    by 0x124610: fd_close (fdlist.c:127)
==4562==    by 0x113653: auth_error (auth.c:235)
==4562==    by 0x1139AD: auth_connect_callback (auth.c:415)
==4562==    by 0x12C7EC: res_readreply (res.c:593)
==4562==    by 0x12B706: comm_select (s_bsd_epoll.c:153)
==4562==    by 0x11325B: io_loop (ircd.c:181)
==4562==    by 0x11325B: main (ircd.c:491)
==4562==  Block was alloc'd at
==4562==    at 0x4837B65: calloc (vg_replace_malloc.c:752)
==4562==    by 0x1290E0: xcalloc (memory.c:39)
==4562==    by 0x12BF33: make_request (res.c:117)
==4562==    by 0x12C50A: do_query_name (res.c:321)
==4562==    by 0x12EE86: comm_connect_tcp (s_bsd.c:408)
==4562==    by 0x113D59: auth_start_query (auth.c:475)
==4562==    by 0x113D59: auth_start (auth.c:500)
==4562==    by 0x12B706: comm_select (s_bsd_epoll.c:153)
==4562==    by 0x11325B: io_loop (ircd.c:181)
==4562==    by 0x11325B: main (ircd.c:491)
==4562==
==4562== Invalid read of size 8
==4562==    at 0x127E14: dlinkDelete (list.c:125)
==4562==    by 0x12C7FB: rem_request (res.c:107)
==4562==    by 0x12C7FB: res_readreply (res.c:627)
==4562==    by 0x12B706: comm_select (s_bsd_epoll.c:153)
==4562==    by 0x11325B: io_loop (ircd.c:181)
==4562==    by 0x11325B: main (ircd.c:491)
==4562==  Address 0xf82e608 is 8 bytes inside a block of size 472 free'd
==4562==    at 0x48369AB: free (vg_replace_malloc.c:530)
==4562==    by 0x12CBAA: rem_request (res.c:108)
==4562==    by 0x12CBAA: delete_resolver_queries (res.c:230)
==4562==    by 0x124610: fd_close (fdlist.c:127)
==4562==    by 0x113653: auth_error (auth.c:235)
==4562==    by 0x1139AD: auth_connect_callback (auth.c:415)
==4562==    by 0x12C7EC: res_readreply (res.c:593)
==4562==    by 0x12B706: comm_select (s_bsd_epoll.c:153)
==4562==    by 0x11325B: io_loop (ircd.c:181)
==4562==    by 0x11325B: main (ircd.c:491)
==4562==  Block was alloc'd at
==4562==    at 0x4837B65: calloc (vg_replace_malloc.c:752)
==4562==    by 0x1290E0: xcalloc (memory.c:39)
==4562==    by 0x12BF33: make_request (res.c:117)
==4562==    by 0x12C50A: do_query_name (res.c:321)
==4562==    by 0x12EE86: comm_connect_tcp (s_bsd.c:408)
==4562==    by 0x113D59: auth_start_query (auth.c:475)
==4562==    by 0x113D59: auth_start (auth.c:500)
==4562==    by 0x12B706: comm_select (s_bsd_epoll.c:153)
==4562==    by 0x11325B: io_loop (ircd.c:181)
==4562==    by 0x11325B: main (ircd.c:491)
==4562==
==4562== Invalid write of size 8
==4562==    at 0x127E2E: dlinkDelete (list.c:142)
==4562==    by 0x12C7FB: rem_request (res.c:107)
==4562==    by 0x12C7FB: res_readreply (res.c:627)
==4562==    by 0x12B706: comm_select (s_bsd_epoll.c:153)
==4562==    by 0x11325B: io_loop (ircd.c:181)
==4562==    by 0x11325B: main (ircd.c:491)
==4562==  Address 0xf82e610 is 16 bytes inside a block of size 472 free'd
==4562==    at 0x48369AB: free (vg_replace_malloc.c:530)
==4562==    by 0x12CBAA: rem_request (res.c:108)
==4562==    by 0x12CBAA: delete_resolver_queries (res.c:230)
==4562==    by 0x124610: fd_close (fdlist.c:127)
==4562==    by 0x113653: auth_error (auth.c:235)
==4562==    by 0x1139AD: auth_connect_callback (auth.c:415)
==4562==    by 0x12C7EC: res_readreply (res.c:593)
==4562==    by 0x12B706: comm_select (s_bsd_epoll.c:153)
==4562==    by 0x11325B: io_loop (ircd.c:181)
==4562==    by 0x11325B: main (ircd.c:491)
==4562==  Block was alloc'd at
==4562==    at 0x4837B65: calloc (vg_replace_malloc.c:752)
==4562==    by 0x1290E0: xcalloc (memory.c:39)
==4562==    by 0x12BF33: make_request (res.c:117)
==4562==    by 0x12C50A: do_query_name (res.c:321)
==4562==    by 0x12EE86: comm_connect_tcp (s_bsd.c:408)
==4562==    by 0x113D59: auth_start_query (auth.c:475)
==4562==    by 0x113D59: auth_start (auth.c:500)
==4562==    by 0x12B706: comm_select (s_bsd_epoll.c:153)
==4562==    by 0x11325B: io_loop (ircd.c:181)
==4562==    by 0x11325B: main (ircd.c:491)
==4562==
==4562== Invalid write of size 8
==4562==    at 0x127E36: dlinkDelete (list.c:143)
==4562==    by 0x12C7FB: rem_request (res.c:107)
==4562==    by 0x12C7FB: res_readreply (res.c:627)
==4562==    by 0x12B706: comm_select (s_bsd_epoll.c:153)
==4562==    by 0x11325B: io_loop (ircd.c:181)
==4562==    by 0x11325B: main (ircd.c:491)
==4562==  Address 0xf82e608 is 8 bytes inside a block of size 472 free'd
==4562==    at 0x48369AB: free (vg_replace_malloc.c:530)
==4562==    by 0x12CBAA: rem_request (res.c:108)
==4562==    by 0x12CBAA: delete_resolver_queries (res.c:230)
==4562==    by 0x124610: fd_close (fdlist.c:127)
==4562==    by 0x113653: auth_error (auth.c:235)
==4562==    by 0x1139AD: auth_connect_callback (auth.c:415)
==4562==    by 0x12C7EC: res_readreply (res.c:593)
==4562==    by 0x12B706: comm_select (s_bsd_epoll.c:153)
==4562==    by 0x11325B: io_loop (ircd.c:181)
==4562==    by 0x11325B: main (ircd.c:491)
==4562==  Block was alloc'd at
==4562==    at 0x4837B65: calloc (vg_replace_malloc.c:752)
==4562==    by 0x1290E0: xcalloc (memory.c:39)
==4562==    by 0x12BF33: make_request (res.c:117)
==4562==    by 0x12C50A: do_query_name (res.c:321)
==4562==    by 0x12EE86: comm_connect_tcp (s_bsd.c:408)
==4562==    by 0x113D59: auth_start_query (auth.c:475)
==4562==    by 0x113D59: auth_start (auth.c:500)
==4562==    by 0x12B706: comm_select (s_bsd_epoll.c:153)
==4562==    by 0x11325B: io_loop (ircd.c:181)
==4562==    by 0x11325B: main (ircd.c:491)
==4562==
==4562== Invalid free() / delete / delete[] / realloc()
==4562==    at 0x48369AB: free (vg_replace_malloc.c:530)
==4562==    by 0x12C803: rem_request (res.c:108)
==4562==    by 0x12C803: res_readreply (res.c:627)
==4562==    by 0x12B706: comm_select (s_bsd_epoll.c:153)
==4562==    by 0x11325B: io_loop (ircd.c:181)
==4562==    by 0x11325B: main (ircd.c:491)
==4562==  Address 0xf82e600 is 0 bytes inside a block of size 472 free'd
==4562==    at 0x48369AB: free (vg_replace_malloc.c:530)
==4562==    by 0x12CBAA: rem_request (res.c:108)
==4562==    by 0x12CBAA: delete_resolver_queries (res.c:230)
==4562==    by 0x124610: fd_close (fdlist.c:127)
==4562==    by 0x113653: auth_error (auth.c:235)
==4562==    by 0x1139AD: auth_connect_callback (auth.c:415)
==4562==    by 0x12C7EC: res_readreply (res.c:593)
==4562==    by 0x12B706: comm_select (s_bsd_epoll.c:153)
==4562==    by 0x11325B: io_loop (ircd.c:181)
==4562==    by 0x11325B: main (ircd.c:491)
==4562==  Block was alloc'd at
==4562==    at 0x4837B65: calloc (vg_replace_malloc.c:752)
==4562==    by 0x1290E0: xcalloc (memory.c:39)
==4562==    by 0x12BF33: make_request (res.c:117)
==4562==    by 0x12C50A: do_query_name (res.c:321)
==4562==    by 0x12EE86: comm_connect_tcp (s_bsd.c:408)
==4562==    by 0x113D59: auth_start_query (auth.c:475)
==4562==    by 0x113D59: auth_start (auth.c:500)
==4562==    by 0x12B706: comm_select (s_bsd_epoll.c:153)
==4562==    by 0x11325B: io_loop (ircd.c:181)
==4562==    by 0x11325B: main (ircd.c:491)
==4562==


Cheers,
Julien

-- System Information:
Debian Release: 10.1
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-debug'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-6-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages ircd-hybrid depends on:
ii  debconf [debconf-2.0]  1.5.71
ii  libc6                  2.28-10
ii  libgnutls30            3.6.7-4
ii  libltdl7               2.4.6-9
ii  lsb-base               10.2019051400
ii  openssl                1.1.1c-1

Versions of packages ircd-hybrid recommends:
ii  whois  5.4.3

Versions of packages ircd-hybrid suggests:
ii  anope  2.0.6-1+b1

-- Configuration Files:
/etc/init.d/ircd-hybrid changed: [tried to make it dump core, shouldn't be 
relevant]
/etc/ircd-hybrid/cert.cnf [Errno 13] Permission denied: 
'/etc/ircd-hybrid/cert.cnf'
/etc/ircd-hybrid/cresv.conf [Errno 13] Permission denied: 
'/etc/ircd-hybrid/cresv.conf'
/etc/ircd-hybrid/dline.conf [Errno 13] Permission denied: 
'/etc/ircd-hybrid/dline.conf'
/etc/ircd-hybrid/ircd.conf [Errno 13] Permission denied: 
'/etc/ircd-hybrid/ircd.conf'
/etc/ircd-hybrid/ircd.motd [Errno 13] Permission denied: 
'/etc/ircd-hybrid/ircd.motd'
/etc/ircd-hybrid/kline.conf [Errno 13] Permission denied: 
'/etc/ircd-hybrid/kline.conf'
/etc/ircd-hybrid/nresv.conf [Errno 13] Permission denied: 
'/etc/ircd-hybrid/nresv.conf'
/etc/ircd-hybrid/xline.conf [Errno 13] Permission denied: 
'/etc/ircd-hybrid/xline.conf'

-- debconf information:
  ircd-hybrid/upgrade_to_nossl_warn: true
* ircd-hybrid/upgrade_no_services_warn: false
  ircd-hybrid/upgrade_secure_links_warn: true
  ircd-hybrid/restart_on_upgrade: true

Reply via email to