Package: tmperamental
Version: 1.1
Severity: grave
tmperamental makes ls(1) crash:
$ tmperamental ls
Segmentation fault
Backtrace:
#0 0x00000000 in ?? ()
#1 0xf7f2850e in selinuxfs_exists_internal () at init.c:64
#2 0xf7f1fee0 in init_selinuxmnt () at init.c:99
#3 init_lib () at init.c:154
#4 0xf7f7f0ec in call_init (l=<optimized out>, argc=argc@entry=1,
argv=argv@entry=0xff923a34, env=0xff923a3c) at dl-init.c:72
#5 0xf7f7f1f2 in call_init (env=0xff923a3c, argv=0xff923a34, argc=1, l=<optimized
out>) at dl-init.c:30
#6 _dl_init (main_map=<optimized out>, argc=1, argv=0xff923a34,
env=0xff923a3c) at dl-init.c:119
#7 0xf7f700fa in _dl_start_user () from /lib/ld-linux.so.2
AFAICS, libselinux has a constructor which uses fopen(), and that
constructor runs earlier than tmperamental's one, leading to null
pointer dereference.
-- System Information:
Architecture: i386
Versions of packages tmperamental depends on:
ii libc6 2.29-2
--
Jakub Wilk