strace-4.18 test suite: crash with _FORTIFY_SOURCE / invalidly-sized memcpy

A. Wilcox awilfox at adelielinux.org
Thu Aug 17 01:07:31 UTC 2017


Dear strace developers,

We are creating a Linux distribution focused on reliability, security,
and speed using the musl libc and a special version of fortify-headers
created for that libc.  This fortification has caused an illegal memcpy
in the test suite, in nlattr.c: on 64-bit platforms, 'unsigned int' can
be 64-bits, while nlhdrmsg's msg_len is a __u32 in linux/netlink.h.

The attached patch fixes this by declaring msg_len as uint32_t instead
of unsigned int.

Best,
--arw

-- 
A. Wilcox (awilfox)
Project Lead, Adélie Linux
http://adelielinux.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: nlattr-fix.patch
Type: text/x-patch
Size: 581 bytes
Desc: not available
URL: <http://lists.strace.io/pipermail/strace-devel/attachments/20170816/51804540/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://lists.strace.io/pipermail/strace-devel/attachments/20170816/51804540/attachment-0001.bin>


More information about the Strace-devel mailing list