Gentoo Archives: gentoo-hardened

From: Alex Efros <powerman@××××××××.name>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] Security Level: high/server/workstation/virtualization
Date: Sat, 28 Jan 2012 00:12:27
Message-Id: 20120128001129.GG5600@home.power
In Reply to: Re: [gentoo-hardened] Security Level: high/server/workstation/virtualization by pageexec@freemail.hu
1 Hi!
2
3 On Sat, Jan 28, 2012 at 01:07:43AM +0200, pageexec@××××××××.hu wrote:
4 > > Program received signal SIGSEGV, Segmentation fault.
5 > > 0xb75fd152 in readdir64 () from /lib/libc.so.6
6 > x/16i $pc
7 > x/16x $sp
8 >
9 > and based on the disasm i'll need more info later.
10
11 Program received signal SIGSEGV, Segmentation fault.
12 0xb74f9152 in readdir64 () from /lib/libc.so.6
13 (gdb) bt
14 #0 0xb74f9152 in readdir64 () from /lib/libc.so.6
15 #1 0xb75f77ea in scan_sys_class_net (devlistp=0xbfffd868,
16 errbuf=0xbfffd8bc "tun0: You don't have permission to capture on that device (socket: Operation not permitted)") at ./pcap-linux.c:1832
17 #2 0xb75fafff in pcap_platform_finddevs (alldevsp=0xbfffd868,
18 errbuf=0xbfffd8bc "tun0: You don't have permission to capture on that device (socket: Operation not permitted)") at ./pcap-linux.c:2081
19 #3 0xb75fd232 in pcap_findalldevs (alldevsp=0xbfffd8b8,
20 errbuf=0xbfffd8bc "tun0: You don't have permission to capture on that device (socket: Operation not permitted)") at ./fad-getad.c:275
21 #4 0xb778569d in get_interface_list_findalldevs (err=0xbfffda88, err_str=0xbfffda84)
22 at capture-pcap-util.c:174
23 #5 0xb77839c0 in get_interface_list (err=0xbfffda88, err_str=0xbfffda84)
24 at capture-pcap-util-unix.c:110
25 #6 0xb77899d2 in capture_interface_list (err=0xbfffda88, err_str=0xbfffda84) at dumpcap.c:797
26 #7 0xb7785345 in capture_opts_trim_iface (capture_opts=0xb7791060, capture_device=0x0)
27 at capture_opts.c:770
28 #8 0xb778a6cd in main (argc=<optimized out>, argv=<optimized out>) at dumpcap.c:3850
29 (gdb) x/16i $pc
30 => 0xb74f9152 <readdir64+54>: cmpxchg %ecx,0x4(%esi)
31 0xb74f9156 <readdir64+58>: jne 0xb74f91dc
32 0xb74f915c <readdir64+64>: mov 0x10(%esi),%eax
33 0xb74f915f <readdir64+67>: lea 0x18(%esi),%edi
34 0xb74f9162 <readdir64+70>: jmp 0xb74f917d <readdir64+97>
35 0xb74f9164 <readdir64+72>: lea (%edi,%eax,1),%edx
36 0xb74f9167 <readdir64+75>: movzwl 0x10(%edx),%ecx
37 0xb74f916b <readdir64+79>: add %ecx,%eax
38 0xb74f916d <readdir64+81>: mov %eax,0x10(%esi)
39 0xb74f9170 <readdir64+84>: mov 0x8(%edx),%ecx
40 0xb74f9173 <readdir64+87>: mov %ecx,0x14(%esi)
41 0xb74f9176 <readdir64+90>: mov 0x4(%edx),%ecx
42 0xb74f9179 <readdir64+93>: or (%edx),%ecx
43 0xb74f917b <readdir64+95>: jne 0xb74f91b1 <readdir64+149>
44 0xb74f917d <readdir64+97>: cmp 0xc(%esi),%eax
45 0xb74f9180 <readdir64+100>: jb 0xb74f9164 <readdir64+72>
46 (gdb) x/16x $sp
47 0xbfffd508: 0x00000000 0xb7625c60 0xbfffd8bc 0xbfffd868
48 0xbfffd518: 0xbfffd7a8 0xb75f77ea 0x00000000 0x00000002
49 0xbfffd528: 0x00000000 0xb7625c60 0x00000000 0xb761385c
50 0xbfffd538: 0xbfffd558 0x75ab49e0 0xbfffd868 0xbfffd8bc
51 (gdb)
52
53 --
54 WBR, Alex.

Replies