Re: [gentoo-amd64] QT Broken ("smash stacking attack in function void QPainter")

[Kevin F. Quinn]

On Tue, 6 Jun 2006 21:12:22 +0200
"Etienne Imguimbert" <eimguimbert@×××××.com> wrote:

> Dear gentoo amd64 users,

See https://bugs.gentoo.org/show_bug.cgi?id=126896

You have two options :)

1) Back off qt to the previous version (see comment #10 of the bug for
someone else who successfully did this)

or

2) switch to the hardenednossp compiler, re-emerge qt, then switch the
compiler back to your default.

It's not clear at the moment whether the problem is caused by SSP or
whether there is a compiler bug that SSP is highlighting.

> From several dayx I have KDE unusable, the error message is:
> "stack smashing attack in function void QPainter"
> This message is obtained when trying to launch kdm, or ANY kde
> application (as the script startkde).
> I've searched in the gentoo forums, and a user said that downgrading
> zlib could solve the problem (see:
> http://forums.gentoo.org/viewtopic-p-1231251.html?sid=76f91a5b2d4597d0d8ffea6c8beef0b7
> ) Unfortunately, the only ebuild of zlib available in portage is
> zlib-1.2.3.ebuild (the version installed on my system). On the
> internet the oldest version I found is 1.2.2. I installed it, and I
> got the same problem.
>
> Does someone have any idea for the way to solve this bug?
> I give below the output of the command emerge --info (note that I use
> the flag hardened)
> Thank you by advance
>
> Best regards,
> Etienne
>
> Gentoo Base System version 1.6.14
> Portage 2.0.54-r2 (default-linux/amd64/2006.0, gcc-3.4.5,
> glibc-2.3.6-r3, 2.6.15-gentoo-r1-C10 x86_64)
> =================================================================
> System uname: 2.6.15-gentoo-r1-C10 x86_64 AMD Athlon(tm) 64 Processor
> 3500+ ccache version 2.3 [enabled]
> dev-lang/python:     2.3.5-r2, 2.4.2
> dev-python/pycrypto: 2.0.1-r4
> dev-util/ccache:     2.3
> dev-util/confcache:  [Not Present]
> sys-apps/sandbox:    1.2.17
> sys-devel/autoconf:  2.13, 2.59-r7
> sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r1
> sys-devel/binutils:  2.16.1-r2
> sys-devel/libtool:   1.5.22
> virtual/os-headers:  2.6.11-r2
> ACCEPT_KEYWORDS="amd64"
> AUTOCLEAN="yes"
> CBUILD="x86_64-pc-linux-gnu"
> CFLAGS="-march=k8 -pipe -fomit-frame-pointer -O2"
> CHOST="x86_64-pc-linux-gnu"
> CONFIG_PROTECT="/etc /usr/kde/3.5/env /usr/kde/3.5/share/config
> /usr/kde/3.5/shutdown /usr/lib/X11/xkb /usr/share/config
> /usr/share/texmf/dvipdfm/config/ /usr/share/texmf/dvips/config/
> /usr/share/texmf/tex/generic/config/
> /usr/share/texmf/tex/platex/config/ /usr/share/texmf/xdvi/"
> CONFIG_PROTECT_MASK="/etc/gconf /etc/splash /etc/terminfo /etc/env.d"
> CXXFLAGS="-march=k8 -pipe -fomit-frame-pointer -O2"
> DISTDIR="/usr/portage/distfiles"
> FEATURES="autoconfig ccache distlocks sandbox sfperms strict"
> GENTOO_MIRRORS="http://www.die.unipd.it/pub/Linux/distributions/gentoo-sources/
> http://mirror.ovh.net/gentoo-distfiles/"
> LANG="fr_FR@euro"
> LC_ALL="fr_FR@euro"
> LINGUAS="fr fr_FR"
> MAKEOPTS="-j2"
> PKGDIR="/usr/portage/packages"
> PORTAGE_TMPDIR="/var/tmp"
> PORTDIR="/usr/portage"
> PORTDIR_OVERLAY="/usr/local/portage"
> SYNC="rsync://rsync.fr.gentoo.org/gentoo-portage"
> USE="amd64 X aalib alsa arts artswrappersuid audiofile avi
> bash-completion berkdb bitmap-fonts browserplugin bzip2 caps cdr cli
> crypt curl dlloader dmx dri dvd eds emboss encode exif expat fam
> ffmpeg flac font-server foomaticdb fortran gdbm gif glitz glut gmp
> gnutls gphoto2 gpm gtk gtk2 gtkhtml hardened idn imagemagick imlib
> ipv6 isdnlog java jpeg jpeg2k junit kde kdeenablefinal kdgraphics lcms
> libwww lzw lzw-tiff mad md5sum mng mozsvg mp3 mpeg musicbrainz ncurses
> nls nptl nptlonly nsplugin ogg oggvorbis openal opengl oss pam pcre
> pdflib perl png pppd python qt quicktime readline reflection ruby sdl
> session spell spl sqlite ssl svg symlink tcpd tetex tiff toolbar
> truetype truetype-fonts type1-fonts udev unicode usb userlocales
> vorbis wmf xine xml2 xorg xpm xprint xv xvid zlib linguas_fr
> linguas_fr_FR userland_GNU kernel_linux elibc_glibc"
> Unset:  CTARGET, INSTALL_MASK, LDFLAGS, PORTAGE_RSYNC_EXTRA_OPTS,
> PORTAGE_RSYNC_OPTS


-- 
Kevin F. Quinn