Re: [gentoo-hardened] teamspeak2-server-bin segfaulting

[John Schember]

You don't need to open a bug report for this. It is unique to your
setup. You are no doubt using PAX in your kernel. There are known issues
with Team Speak and PAX. Simply use the chpax utility on the app to
allow it some leeway. Searched http://forum.goteamspeak.com/ for PAX a
number of people have run into this problem and there are solutions. I'm
pointing you there because I can't comment on which is the best.

John Schember


On Mon, 2007-01-08 at 11:17 +1030, Shawn Haggett wrote:
> I've recently tried to install teamspeak2-server-bin onto my hardened
> gentoo server. However everytime I attempt to start it, the process dies
> with a segfault.
>
> I thought I would post here first, to see if anyone has any ideas,
> before I go opening a bug.
>
> emerge --info output:
>
> Portage 2.1.1-r2 (hardened/x86/2.6, gcc-3.4.6, glibc-2.3.6-r5,
> 2.6.17-hardened-r1 i686)
> =================================================================
> System uname: 2.6.17-hardened-r1 i686 Intel(R) Pentium(R) 4 CPU 3.00GHz
> Gentoo Base System version 1.12.6
> Last Sync: Sun, 07 Jan 2007 16:30:01 +0000
> app-admin/eselect-compiler: [Not Present]
> dev-java/java-config: 1.3.7, 2.0.31
> dev-lang/python:     2.4.3-r4
> dev-python/pycrypto: 2.0.1-r5
> dev-util/ccache:     [Not Present]
> dev-util/confcache:  [Not Present]
> sys-apps/sandbox:    1.2.17
> sys-devel/autoconf:  2.13, 2.61
> sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10
> sys-devel/binutils:  2.16.1-r3
> sys-devel/gcc-config: 1.3.14
> sys-devel/libtool:   1.5.22
> virtual/os-headers:  2.6.17-r2
> ACCEPT_KEYWORDS="x86"
> AUTOCLEAN="yes"
> CBUILD="i686-pc-linux-gnu"
> CFLAGS="-march=pentium4 -O2 -pipe"
> CHOST="i686-pc-linux-gnu"
> CONFIG_PROTECT="/etc /usr/share/X11/xkb /var/bind"
> CONFIG_PROTECT_MASK="/etc/env.d /etc/env.d/java/ /etc/gconf
> /etc/java-config/vms/ /etc/revdep-rebuild /etc/terminfo /etc/texmf/web2c"
> CXXFLAGS="-march=pentium4 -O2 -pipe"
> DISTDIR="/usr/portage/distfiles"
> FEATURES="autoconfig distlocks fixpackages metadata-transfer
> parallel-fetch sandbox sfperms strict userpriv"
> GENTOO_MIRRORS="ftp://mirror.internode.on.net/pub/gentoo
> http://distfiles.gentoo.org
> http://www.ibiblio.org/pub/Linux/distributions/gentoo"
> MAKEOPTS="-j4"
> PKGDIR="/usr/portage/packages"
> PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times
> --compress --force --whole-file --delete --delete-after --stats
> --timeout=180 --exclude='/distfiles' --exclude='/local'
> --exclude='/packages'"
> PORTAGE_TMPDIR="/var/tmp"
> PORTDIR="/usr/portage"
> PORTDIR_OVERLAY="/usr/local/portage"
> SYNC="rsync://speedy.podgeweb.com/gentoo-portage"
> USE="X acpi alsa_pcm_plugins_adpcm alsa_pcm_plugins_alaw
> alsa_pcm_plugins_asym alsa_pcm_plugins_copy alsa_pcm_plugins_dmix
> alsa_pcm_plugins_dshare alsa_pcm_plugins_dsnoop alsa_pcm_plugins_empty
> alsa_pcm_plugins_extplug alsa_pcm_plugins_file alsa_pcm_plugins_hooks
> alsa_pcm_plugins_iec958 alsa_pcm_plugins_ioplug alsa_pcm_plugins_ladspa
> alsa_pcm_plugins_lfloat alsa_pcm_plugins_linear alsa_pcm_plugins_meter
> alsa_pcm_plugins_mulaw alsa_pcm_plugins_multi alsa_pcm_plugins_null
> alsa_pcm_plugins_plug alsa_pcm_plugins_rate alsa_pcm_plugins_route
> alsa_pcm_plugins_share alsa_pcm_plugins_shm alsa_pcm_plugins_softvol
> apache2 async authdaemond authfile automount bash-completion berkdb
> big-tables bitmap-fonts bzip2 chroot cli courier crypt curl dba
> discard-path dlloader elibc_glibc enscript exif expat extraengine fam
> fix-connected-rt force-cgi-redirect ftp gd gdbm gif gmp hardened idn
> imap innodb input_devices_keyboard input_devices_mouse java jce jpeg
> kernel_linux lcms maildir mhash mime mmap mmx mpm-worker mysql mysqli
> nagios-dns nagios-ntp nagios-ssh ncurses nptl nptlonly offensive pam
> pcre pdf perl php pic png postfix python readline reflection samba sasl
> sensord session sockets spell spl sse sse2 ssl symlink sysfs syslog
> tcltk tcpd test tetex threads tiff tokenizer toolbar truetype
> userland_GNU userlocales vhosts vim-with-x x86 xinerama xml xorg xpm zip
> zlib"
> Unset:  CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL,
> LDFLAGS, LINGUAS, PORTAGE_RSYNC_EXTRA_OPTS
>
>
> After checking the init script for teamspeak, I ran it with the
> following command line:
> strace -oteamspeak-trace.txt /opt/teamspeak2-server/server_linux \
> -db=/var/lib/teamspeak2-server/server.dbs \
> -ini=/var/lib/teamspeak2-server/server.ini \
> -log=/var/log/teamspeak2-server/server.log \
> -pid=/var/run/teamspeak2-server/server.pid \
> -sql=/opt/teamspeak2-server/sql/ \
> -tcpquerydocs=/opt/teamspeak2-server/tcpquerydocs \
> -httpdocs=/opt/teamspeak2-server/http/
>
> The trace file is attached. It's rather short. My guess is that the
> mmap2 call on the second to last line, which returns 0, is to blame.
> However if anyone can shed some light on why this is happening and how
> to work around it, that would be great.
>
> Shawn
> plain text document attachment (teamspeak-trace.txt)
> execve("/opt/teamspeak2-server/server_linux", ["/opt/teamspeak2-server/server_li"..., "-db=/var/lib/teamspeak2-server/s"..., "-ini=/var/lib/teamspeak2-server/"..., "-log=/var/log/teamspeak2-server/"..., "-pid=/var/run/teamspeak2-server/"..., "-sql=/opt/teamspeak2-server/sql/"..., "-tcpquerydocs=/opt/teamspeak2-se"..., "-httpdocs=/opt/teamspeak2-server"...], [/* 44 vars */]) = 0
> uname({sys="Linux", node="speedy", ...}) = 0
> brk(0)                                  = 0x823783c
> access("/etc/ld.so.preload", R_OK)      = -1 ENOENT (No such file or directory)
> open("/etc/ld.so.cache", O_RDONLY)      = 3
> fstat64(3, {st_mode=S_IFREG|0644, st_size=63665, ...}) = 0
> mmap2(NULL, 63665, PROT_READ, MAP_PRIVATE, 3, 0) = 0x4e63b000
> close(3)                                = 0
> open("/lib/libpthread.so.0", O_RDONLY)  = 3
> read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\334H\0"..., 512) = 512
> fstat64(3, {st_mode=S_IFREG|0755, st_size=104800, ...}) = 0
> mmap2(NULL, 69848, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x4e629000
> madvise(0x4e629000, 69848, MADV_SEQUENTIAL|0x1) = 0
> mmap2(0x4e637000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xd) = 0x4e637000
> mmap2(0x4e639000, 4312, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x4e639000
> close(3)                                = 0
> open("/lib/libdl.so.2", O_RDONLY)       = 3
> read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\340\v\0"..., 512) = 512
> fstat64(3, {st_mode=S_IFREG|0755, st_size=10512, ...}) = 0
> mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x4e628000
> mmap2(NULL, 12332, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x4e624000
> madvise(0x4e624000, 12332, MADV_SEQUENTIAL|0x1) = 0
> mmap2(0x4e626000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1) = 0x4e626000
> close(3)                                = 0
> open("/lib/libc.so.6", O_RDONLY)        = 3
> read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\326O\1"..., 512) = 512
> fstat64(3, {st_mode=S_IFREG|0755, st_size=1220520, ...}) = 0
> mmap2(NULL, 1150108, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x4e50b000
> madvise(0x4e50b000, 1150108, MADV_SEQUENTIAL|0x1) = 0
> mmap2(0x4e61e000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x113) = 0x4e61e000
> mmap2(0x4e622000, 7324, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x4e622000
> close(3)                                = 0
> mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x4e50a000
> mprotect(0x4e61e000, 4096, PROT_READ)   = 0
> mprotect(0x4e626000, 4096, PROT_READ)   = 0
> mprotect(0x4e637000, 4096, PROT_READ)   = 0
> mprotect(0x4e661000, 4096, PROT_READ)   = 0
> set_thread_area({entry_number:-1 -> 6, base_addr:0x4e50a6b0, limit:1048575, seg_32bit:1, contents:0, read_exec_only:0, limit_in_pages:1, seg_not_present:0, useable:1}) = 0
> munmap(0x4e63b000, 63665)               = 0
> set_tid_address(0x4e50a6f8)             = 21183
> rt_sigaction(SIGRTMIN, {0x4e62d424, [], SA_RESTORER|SA_SIGINFO, 0x4e634490}, NULL, 8) = 0
> rt_sigaction(SIGRT_1, {0x4e62d498, [], SA_RESTORER|SA_RESTART|SA_SIGINFO, 0x4e634490}, NULL, 8) = 0
> rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
> getrlimit(RLIMIT_STACK, {rlim_cur=8192*1024, rlim_max=RLIM_INFINITY}) = 0
> _sysctl({{CTL_KERN, KERN_VERSION}, 2, 0x5c311f6c, 35, (nil), 0}) = 0
> open("/dev/urandom", O_RDONLY)          = 3
> read(3, "\4\344\344\205", 4)            = 4
> close(3)                                = 0
> futex(0x4e627028, FUTEX_WAKE, 2147483647) = 0
> brk(0)                                  = 0x823783c
> brk(0x825883c)                          = 0x825883c
> brk(0x8259000)                          = 0x8259000
> open("/opt/teamspeak2-server/server_linux", O_RDONLY) = 3
> read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\f\0\2\0\3\0\1\0\0\0\0206\5"..., 512) = 512
> fstat64(3, {st_mode=S_IFREG|0755, st_size=945552, ...}) = 0
> close(3)                                = 0
> open("/opt/teamspeak2-server/server_linux", O_RDONLY) = 3
> read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\f\0\2\0\3\0\1\0\0\0\0206\5"..., 512) = 512
> fstat64(3, {st_mode=S_IFREG|0755, st_size=945552, ...}) = 0
> close(3)                                = 0
> futex(0x822f45c, FUTEX_WAKE, 2147483647) = 0
> dup(1)                                  = 3
> fcntl64(3, F_GETFL)                     = 0x2 (flags O_RDWR)
> fstat64(3, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 2), ...}) = 0
> mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x4e64a000
> _llseek(3, 0, 0x5c311e58, SEEK_CUR)     = -1 ESPIPE (Illegal seek)
> mmap2(NULL, 65535, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, 0, 0) = 0
> readlink("/proc/self/exe", "/opt/teamspeak2-server/server_linux", 4096) = 35
> --- SIGSEGV (Segmentation fault) @ 0 (0) ---
> +++ killed by SIGSEGV +++

-- 
gentoo-hardened@g.o mailing list