omniMapper crashes with exit status 139. We confirmed the crash by
re-running it in a fresh debian unstable installation.

The attachment [1] contains a testcase (under ./crash) crashing the
program. It ensures that you can easily reproduce the bug. Additionally,
under ./crash_info/, we include more information about the crash such as
a core dump, the dmesg generated by the crash, and its output.

Regards,
The Mayhem Team (Alexandre Rebert, Thanassis Avgerinos, Sang Kil Cha, David Brumley, Manuel Egele)
Cylab, Carnegie Mellon University

[1] http://www.forallsecure.com/bug-reports/a4b1a308d7289a92b3c17551c0e3f5eb1f185954/full_report

available in Debian unstable, testing and a backport has been made to
stable (bullseye).

The URL in the bug is now a 404 but the omniMapper-report.tar.bz2
attachment remains, so thanks for providing that.

I have reproduced the crash on Stretch (omniorb 4.1.6-2.1+b1).
crash.sh: line 12: warning: command substitution: ignored null byte in
input
crash.sh: line 19:  7401 Segmentation fault      env -i MALLOC_CHECK_=0
$GDB /usr/bin/omniMapper "`cat $DIR/argv_1.symb`" <
"$DIR/file___dev__stdin.symb"


The crash no longer happens with 4.2.5:
crash.sh: line 12: warning: command substitution: ignored null byte in
input

usage: omniMapper [-port <port>]
                  [-config <config file>]
                  [-v]

With no -port argument, the standard default of 2809 is used.

Use -config to specify the location of omniMapper's config file.

Alternatively, set the environment variable OMNIMAPPER_CONFIG
or use the default /etc/omniMapper.cfg.

Use -v to verbosely record what's going on.

I'll close this bug report with the next upload of omniorb.

We believe that the bug you reported is fixed in the latest version of
omniorb-dfsg, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 716555@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Neil Williams <codehelp@debian.org> (supplier of updated omniorb-dfsg package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Fri, 22 Apr 2022 09:41:00 +0100
Source: omniorb-dfsg
Architecture: source
Version: 4.2.5+ds1-1
Distribution: unstable
Urgency: medium
Maintainer: Freexian Packaging Team <team+freexian@tracker.debian.org>
Changed-By: Neil Williams <codehelp@debian.org>
Closes: 716555
Changes:
 omniorb-dfsg (4.2.5+ds1-1) unstable; urgency=medium
 .
   * Repack to drop upstream html, add +ds1 to binary packages.
   * Trim trailing whitespace.
   * Use secure URI in debian/watch.
   * Remove field Section on binary package omniorb-doc that duplicates source.
   * Rebuild upstream HTML using hevea
   * Add repack opts to d.watch
   * Fix spelling typo in patch description
   * Confirm Mayhem report for version in stretch is fixed in 4.2.5
     (Closes: #716555)
Checksums-Sha1:
 1663ffb341158f177a2219d09181cb9cbec34409 2639 omniorb-dfsg_4.2.5+ds1-1.dsc
 ec130291bb933a3216af7dcc1e6e46cf0a1ec2dc 2108012 omniorb-dfsg_4.2.5+ds1.orig.tar.xz
 80aebf6b708e9ba89531db1a65ba3f963a4aa4d6 14796 omniorb-dfsg_4.2.5+ds1-1.debian.tar.xz
 3f6b698e5931a4f9ab6ecec00a86e9827f79e3e5 13901 omniorb-dfsg_4.2.5+ds1-1_amd64.buildinfo
Checksums-Sha256:
 f26ca6fb1db5bb2c5a5fd1551fc226d75ca0b7e09c33ffe9e6d5d00a1d22a782 2639 omniorb-dfsg_4.2.5+ds1-1.dsc
 1101178cb9c5f79e6a88431421dbfeb663e5910d785bafe8d335b5748c415e67 2108012 omniorb-dfsg_4.2.5+ds1.orig.tar.xz
 714865aa86e6c1c1978a825b2ae966b1d59d987ea426a0be10f7f6301adf3c1d 14796 omniorb-dfsg_4.2.5+ds1-1.debian.tar.xz
 ce219b22e3466f7873d7a9604f32b375bb6ec74d2402eb0d5280d172bcf98905 13901 omniorb-dfsg_4.2.5+ds1-1_amd64.buildinfo
Files:
 6223577be55186a28a95f5201dd77e7b 2639 devel optional omniorb-dfsg_4.2.5+ds1-1.dsc
 ba80118eef194033f821ae711e0c3b67 2108012 devel optional omniorb-dfsg_4.2.5+ds1.orig.tar.xz
 ce0c76159e3b27084284ccca474f8711 14796 devel optional omniorb-dfsg_4.2.5+ds1-1.debian.tar.xz
 39569f5ea63d8849942e92c3aaf84030 13901 devel optional omniorb-dfsg_4.2.5+ds1-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
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=F6H3
-----END PGP SIGNATURE-----