Segmentation Fault about minisign

[jedisct1]

Bug filed: https://bugs.archlinux.org/task/55292

A workaround was also added to libsodium 1.0.13-stable.

[niaow]

Hi, thank you for your help! I just finished switching over to minisign for my package verification which allowed me to cut the size of the base system to 2MB.

[jedisct1]

The list of available packages on http://repo.projectpanux.com/ is pretty scarse. No gcc, no gdb, no ltrace, no strace.
Where are these available?

[niaow]

Sorry, but I dont have those ported over yet.

[jedisct1]

This is going to be hard, then :/

Did all the libsodium tests pass? The package wasn't built without running make check, was it?

[niaow]

I did run make check on libsodium. I will try to get something ported over

[niaow]

It looks like my friend saw this and ported over strace and gdb

[jedisct1]

gdb doesn't work... It's been compiled with Python support, but libpython is missing, as well as a dependency on expat.

[niaow]

Sorry, didnt get a chance to try it out. Just saw it on my phone. Will fix later.

[jedisct1]

Having gcc would be even better!

[niaow]

Yeah. . . Um. . . GCC is a work in progress (when we tried to package it we got error messages that made no sense). It may be a while before we get gcc working.

[niaow]

I got a coredump out of the container:

https://transfer.sh/yuWk0/minisigncoredump

[niaow]

It appears to have segfaulted in one of the fucntion calls in seckey_chk. I will try to figure out which

[niaow]

GDB is fixed now. The segfault was in __stack_chk_fail.

[niaow]

so basically we had a stack overflow. . .

[niaow]

I accidentally just did the same thing on my host (running arch linux) and got the same error but more verbose:

*** stack smashing detected ***: minisign terminated
======= Backtrace: =========
/usr/lib/libc.so.6(+0x72bdd)[0x7fc682e3fbdd]
/usr/lib/libc.so.6(__fortify_fail+0x38)[0x7fc682ecc158]
/usr/lib/libc.so.6(__fortify_fail+0x0)[0x7fc682ecc120]
minisign[0x4023ef]
minisign(main+0x396)[0x401dc6]
/usr/lib/libc.so.6(__libc_start_main+0xea)[0x7fc682ded4ca]
minisign(_start+0x2a)[0x40225a]
======= Memory map: ========
00400000-00406000 r-xp 00000000 00:14 1362975 /usr/bin/minisign
00605000-00606000 r--p 00005000 00:14 1362975 /usr/bin/minisign
00606000-00607000 rw-p 00006000 00:14 1362975 /usr/bin/minisign
01a42000-01a63000 rw-p 00000000 00:00 0 [heap]
7fc682998000-7fc6829ae000 r-xp 00000000 00:14 1044298 /usr/lib/libgcc_s.so.1
7fc6829ae000-7fc682bad000 ---p 00016000 00:14 1044298 /usr/lib/libgcc_s.so.1
7fc682bad000-7fc682bae000 r--p 00015000 00:14 1044298 /usr/lib/libgcc_s.so.1
7fc682bae000-7fc682baf000 rw-p 00016000 00:14 1044298 /usr/lib/libgcc_s.so.1
7fc682baf000-7fc682bc8000 r-xp 00000000 00:14 1043174 /usr/lib/libpthread-2.25.so
7fc682bc8000-7fc682dc7000 ---p 00019000 00:14 1043174 /usr/lib/libpthread-2.25.so
7fc682dc7000-7fc682dc8000 r--p 00018000 00:14 1043174 /usr/lib/libpthread-2.25.so
7fc682dc8000-7fc682dc9000 rw-p 00019000 00:14 1043174 /usr/lib/libpthread-2.25.so
7fc682dc9000-7fc682dcd000 rw-p 00000000 00:00 0
7fc682dcd000-7fc682f6a000 r-xp 00000000 00:14 1043202 /usr/lib/libc-2.25.so
7fc682f6a000-7fc683169000 ---p 0019d000 00:14 1043202 /usr/lib/libc-2.25.so
7fc683169000-7fc68316d000 r--p 0019c000 00:14 1043202 /usr/lib/libc-2.25.so
7fc68316d000-7fc68316f000 rw-p 001a0000 00:14 1043202 /usr/lib/libc-2.25.so
7fc68316f000-7fc683173000 rw-p 00000000 00:00 0
7fc683173000-7fc6831df000 r-xp 00000000 00:14 1362797 /usr/lib/libsodium.so.18.3.0
7fc6831df000-7fc6833df000 ---p 0006c000 00:14 1362797 /usr/lib/libsodium.so.18.3.0
7fc6833df000-7fc6833e0000 r--p 0006c000 00:14 1362797 /usr/lib/libsodium.so.18.3.0
7fc6833e0000-7fc6833e1000 rw-p 0006d000 00:14 1362797 /usr/lib/libsodium.so.18.3.0
7fc6833e1000-7fc683404000 r-xp 00000000 00:14 1043192 /usr/lib/ld-2.25.so
7fc6835c4000-7fc6835c9000 rw-p 00000000 00:00 0
7fc6835f3000-7fc6835f4000 rw-p 00000000 00:00 0
7fc6835f4000-7fc6835f5000 r--p 00000000 00:00 0
7fc6835f5000-7fc6835f6000 ---p 00000000 00:00 0
7fc6835f6000-7fc6835f7000 rw-p 00000000 00:00 0
7fc6835f7000-7fc6835f8000 ---p 00000000 00:00 0
7fc6835f8000-7fc6835f9000 r--p 00000000 00:00 0
7fc6835f9000-7fc6835fa000 ---p 00000000 00:00 0
7fc6835fa000-7fc6835fb000 rw-p 00000000 00:00 0
7fc6835fb000-7fc6835fc000 ---p 00000000 00:00 0
7fc6835fc000-7fc6835fd000 r--p 00000000 00:00 0
7fc6835fd000-7fc6835fe000 ---p 00000000 00:00 0
7fc6835fe000-7fc6835ff000 rw-p 00000000 00:00 0
7fc6835ff000-7fc683600000 ---p 00000000 00:00 0
7fc683600000-7fc683601000 r--p 00000000 00:00 0
7fc683601000-7fc683602000 ---p 00000000 00:00 0
7fc683602000-7fc683603000 rw-p 00000000 00:00 0
7fc683603000-7fc683604000 ---p 00000000 00:00 0
7fc683604000-7fc683605000 r--p 00023000 00:14 1043192 /usr/lib/ld-2.25.so
7fc683605000-7fc683606000 rw-p 00024000 00:14 1043192 /usr/lib/ld-2.25.so
7fc683606000-7fc683607000 rw-p 00000000 00:00 0
7fffeed14000-7fffeed35000 rw-p 00000000 00:00 0 [stack]
7fffeed75000-7fffeed77000 r--p 00000000 00:00 0 [vvar]
7fffeed77000-7fffeed79000 r-xp 00000000 00:00 0 [vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0 [vsyscall]
Aborted (core dumped)

[niaow]

It is probbably easier to debug on arch linux. (use pacman -S minisign)

[jedisct1]

The package was compiled against a different (older) version of libsodium than the one installed on the system, and a structure is not aligned the same way.

It should be recompiled.