[Pkg-urxvt-maintainers] Bug#709848: rxvt-unicode crashes in libperl (Perl_safesysmalloc)

[Sebastian Kricner]

Package: rxvt-unicode
Version: 9.15-2
Severity: normal

Hi,

i use rxvt-unicode and was testing my perl module after the system got upgraded
to wheezy for some time now.

I use a module called send_to_all_vty which i have written.
This modules did work on squeeze without any problems.
The purpose of that module is to send the key input from one tab to all other
tabs so it helps on various system administration tasks, like when working on
multiple systems via ssh.

Unfortunately it appears that rxvt-unicode now segfaults.

dmesg output:

rxvt[4161]: segfault at 7fffe2075ff8 ip 00007f4c0155c34c sp 00007fffe2076000
error 6 in libc-2.13.so[7f4c014e3000+180000]
rxvt[5133]: segfault at 7fff558e6ff8 ip 00007f54303b4e7c sp 00007fff558e7000
error 6 in libperl.so.5.14.2[7f5430340000+177000]
rxvt[21887]: segfault at 7fff6cf61ff0 ip 00007ff3b259d355 sp 00007fff6cf61fc0
error 6 in libc-2.13.so[7ff3b2524000+180000]

GDB:

(gdb) run
The program being debugged has been started already.
Start it from the beginning? (y or n) y
Starting program: /usr/bin/urxvt
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".

Program received signal SIGSEGV, Segmentation fault.
0x00007ffff656ae4d in Perl_safesysmalloc () from /usr/lib/libperl.so.5.14


This may also lead to a buffer overflow vulnerability.

Regards.

Sebastian Kricner



-- System Information:
Debian Release: 7.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.7.2 (SMP w/2 CPU cores; PREEMPT)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages rxvt-unicode depends on:
ii  base-passwd               3.5.26
ii  libc6                     2.13-38
ii  libfontconfig1            2.9.0-7.1
ii  libgcc1                   1:4.7.2-5
ii  libgdk-pixbuf2.0-0        2.26.1-1
ii  libglib2.0-0              2.33.12+really2.32.4-5
ii  libperl5.14               5.14.2-21
ii  libstartup-notification0  0.12-1
ii  libx11-6                  2:1.5.0-1+deb7u1
ii  libxft2                   2.3.1-1
ii  libxrender1               1:0.9.7-1+deb7u1
ii  ncurses-base              5.9-10

Versions of packages rxvt-unicode recommends:
ii  fonts-vlgothic [fonts-japanese-gothic]  20120629-2
ii  ttf-dejavu                              2.33-3

rxvt-unicode suggests no packages.

-- Configuration Files:
/etc/X11/app-defaults/URxvt [Errno 2] Datei oder Verzeichnis nicht gefunden:
u'/etc/X11/app-defaults/URxvt'
-------------- next part --------------
A non-text attachment was scrubbed...
Name: send_to_all_vty
Type: text/x-perl
Size: 563 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-urxvt-maintainers/attachments/20130526/6c6861a2/attachment.pl>