Re: [gentoo-hardened] problems with bittorrent and bittornado

[Ned Ludd]

On Sun, 2004-08-01 at 01:56, Rumen Yotov wrote:
> On нд, 2004-08-01 at 00:05, Ned Ludd wrote:
> > On Sat, 2004-07-31 at 16:44, Rumen Yotov wrote:
> > > Hi all,
> > > Tried to DL the new packages-athlon-XP-2004.2.iso with bittorrent or
> > > bittornado but couldn't. The system killed the processes
> > > (btdownloadcurses and gui).
> >
> >
> > > Used strace and it seems that PaX is the culpit, could somebody confirm
> > > this?
> >
> > Your understanding of the problem seems backwards. python is probably
> > the culpit and PaX is only making it obvious that something else has a
> > fundamental code flaw.
> > (It bugs me when I see people blame pax & grsec for faulty software)
> >
> Agreed, think PaX&grsec2 even help catch such things :).
> Bad wording. PaX is just doing what it should.
> For the moment just wanted to make sure it's not my own problem, as i
> have too much :) security things switched ON (PaX&grsec2, even /tmp is
> mounted noexec, ..).Know i have to pay a price (sometimes) for using it.
> > Now without a single piece of debug info or dmesg logs we can't do
> > anything to help you.
> >
> OK, you right.
> > > Have quite full grsec2&PaX with ~x86 system (hardened).
> > > Did it with azureus, but it's a java app.
> > > During tries with strace it even locked my xterm.
> > > TIA
> > > Rumen
> Here is the output info of (attachments):
> $strace -ff -obittorrent.err python /usr/bin/bittorrent.py
> install-x86-universal-allstages-2004.2.iso + emerge_info.txt
> TIA
> Rumen
> PS:as the first message was rejected by list-mailer as being to big,
> (231K),compressed the .err file. Sorry for this. Should i file a bug?

Yeah it looks like you should. python@gentoo would be who it needs to
get assigned to. Please CC: solar@gentoo

You probably want to give them some better debug info as well.
Try this.

FEATURES="nostrip" CFLAGS="-g3 -fno-omit-frame-pointer -fno-pie" emerge
python

ulimit -c unlimited
/usr/bin/python2.3 /usr/bin/bittorrent.py ..
# should segfault and drop a core here.
gdb -q /usr/bin/python2.3 ./core

(gdb) bt full
(gdb) info registers
(gdb) x/8i $pc
------------------------------------------------

Optionally tell them to compile python with
myconf="${myconf} --with-pydebug" in the src_compile()
of the python.ebuild (that will probably expose other problems that we
have been to dumb to notice for far to long because of the -DNDEBUG in
the configure)

good luck.

-- 
Ned Ludd <solar@g.o>
Gentoo (hardened,security,infrastructure,embedded,toolchain) Developer