- Package:
- axiom-graphics
- Source:
- axiom
- Description:
- General purpose computer algebra system: graphics subsystem
- Submitter:
- Alexandre Rebert
- Date:
- 2014-07-17 22:36:05 UTC
- Severity:
- normal
view2d crashes with exit status 139. We confirmed the crash by re-running it in a fresh debian unstable installation. The attachment [1] contains a testcase (under ./crash) crashing the program. It ensures that you can easily reproduce the bug. Additionally, under ./crash_info/, we include more information about the crash such as a core dump, the dmesg generated by the crash, and its output. Regards, The Mayhem Team (Alexandre Rebert, Thanassis Avgerinos, Sang Kil Cha, David Brumley, Manuel Egele) Cylab, Carnegie Mellon University [1] http://www.forallsecure.com/bug-reports/fd21763b1793a46ebf1d7f70b020f1b6da279ed4/full_report
forwarded 716442 axiom-developer@nongnu.org thanks Package: axiom-graphics Version: 20120501-2 Severity: normal User: mayhem@forallsecure.com Usertags: mayhem view2d crashes with exit status 139. We confirmed the crash by re-running it in a fresh debian unstable installation. The attachment [1] contains a testcase (under ./crash) crashing the program. It ensures that you can easily reproduce the bug. Additionally, under ./crash_info/, we include more information about the crash such as a core dump, the dmesg generated by the crash, and its output. Regards, The Mayhem Team (Alexandre Rebert, Thanassis Avgerinos, Sang Kil Cha, David Brumley, Manuel Egele) Cylab, Carnegie Mellon University [1] http://www.forallsecure.com/bug-reports/fd21763b1793a46ebf1d7f70b020f1b6da279ed4/full_report--------------------------------------------------------------------------------------------------------------------------------------------------- Send a report that this bug log contains spam.--------------------------------------------------------------------------------------------------------------------------------------------------- Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Wed Jul 16 19:12:58 2014; Machine Name: buxtehude.debian.org Debian Bug tracking system Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.
Camm, I've downloaded this crash report and will try to reproduce it. Tim
Camm, It appears that Brumley's team is fuzzing the input to the graphics portion of Axiom, likely as an effort to find security holes. I used to work at CMU/CERT and am currently active in the security field. Actually, I'm kind of pleased that they got it to run considering our last exchange about gcc no longer working with the legacy C code. Perhaps I need to get David's gcc list of switches :-) I will log these bug reports but they are certainly queued behind larger problems like getting Axiom running on the MAC. Tim
Greetings! Tim Daly <daly@axiom-developer.org> writes: Just a clarification here, the view2d.c problem is mac specific, to my knowledge. Linux is fine. Take care,
Hmm. if it's a bug we reported, we always test on Debian linux stable. I don't know the particular bug, but I'd be surprised if it's only triggered on macs. Take care, -david
Greetings, sorry for the confusion -- the mayhem bug was on linux, failing runtime garbage input. The compile bug Tim alluded to was mac only. Take care, David Brumley <dbrumley@forallsecure.com> writes:
If Brumley is fuzzing then the problem he is finding (it looks like he is "forcing AA"s) is that the input stream is not properly handling overlong input (scanf? strcpy?). So the problem would be generic. I do this in my pentesting work. I know how to fix it but I want to concentrate on several other fronts first. Tim