0.8.7 Spine Buffer Overflow

[TheWitness]

Goto the source directory and do the following:

gdb spine
b *0x804fc14
quit

Record the source module and line number and post back to me.

Thanks,

TheWitness

[dainiookas]

I think I'am in the same problem as the previous post:

*** buffer overflow detected ***: ./spine terminated
======= Backtrace: =========
/lib/tls/i686/cmov/libc.so.6(__fortify_fail+0x48)[0xb7bdd558]
Host[27] No Host Availability Method Selected

/lib/tls/i686/cmov/libc.so.6[0xb7bdb680]
/lib/tls/i686/cmov/libc.so.6[0xb7bdaf87]
/lib/tls/i686/cmov/libc.so.6(__snprintf_chk+0x34)[0xb7bdae74]
./spine[0x804fc14]
./spine[0x80522fd]
/lib/tls/i686/cmov/libpthread.so.0[0xb7c6e50f]
/lib/tls/i686/cmov/libc.so.6(clone+0x5e)[0xb7bc47ee]
======= Memory map: ========
08048000-0805a000 r-xp 00000000 08:01 4358332 /usr/local/spine/bin/spine
0805a000-0805b000 r--p 00011000 08:01 4358332 /usr/local/spine/bin/spine
0805b000-0805c000 rw-p 00012000 08:01 4358332 /usr/local/spine/bin/spine
0805c000-0805e000 rw-p 0805c000 00:00 0
08357000-085b9000 rw-p 08357000 00:00 0 [heap]
9e4e8000-9e4e9000 ---p 9e4e8000 00:00 0
9e4e9000-9ece9000 rw-p 9e4e9000 00:00 0
9ece9000-9ecea000 ---p 9ece9000 00:00 0
9ecea000-9f4ea000 rw-p 9ecea000 00:00 0
9f4ea000-9f4eb000 ---p 9f4ea000 00:00 0
9f4eb000-9fceb000 rw-p 9f4eb000 00:00 0
9fceb000-9fcec000 ---p 9fceb000 00:00 0
9fcec000-a04ec000 rw-p 9fcec000 00:00 0
a04ec000-a04ed000 ---p a04ec000 00:00 0
a04ed000-a0ced000 rw-p a04ed000 00:00 0
a0ced000-a0cee000 ---p a0ced000 00:00 0
a0cee000-a14ee000 rw-p a0cee000 00:00 0
a14ee000-a14ef000 ---p a14ee000 00:00 0
a14ef000-a1cef000 rw-p a14ef000 00:00 0
a1cef000-a1cf0000 ---p a1cef000 00:00 0
a1cf0000-a24f0000 rw-p a1cf0000 00:00 0
a24f0000-a24f1000 ---p a24f0000 00:00 0
a24f1000-a2cf1000 rw-p a24f1000 00:00 0
a2cf1000-a2cf2000 ---p a2cf1000 00:00 0
a2cf2000-a34f2000 rw-p a2cf2000 00:00 0
a34f2000-a34f3000 ---p a34f2000 00:00 0
a34f3000-a3cf3000 rw-p a34f3000 00:00 0
a3cf3000-a3cf4000 ---p a3cf3000 00:00 0
a3cf4000-a44f4000 rw-p a3cf4000 00:00 0
a44f4000-a44f5000 ---p a44f4000 00:00 0
a44f5000-a4cf5000 rw-p a44f5000 00:00 0
a4cf5000-a4cf6000 ---p a4cf5000 00:00 0
a4cf6000-a54f6000 rw-p a4cf6000 00:00 0
a54f6000-a54f7000 ---p a54f6000 00:00 0
a54f7000-a5cf7000 rw-p a54f7000 00:00 0
a5cf7000-a5cf8000 ---p a5cf7000 00:00 0
a5cf8000-a64f8000 rw-p a5cf8000 00:00 0
a64f8000-a64f9000 ---p a64f8000 00:00 0
a64f9000-a6cf9000 rw-p a64f9000 00:00 0
a6cf9000-a6cfa000 ---p a6cf9000 00:00 0
a6cfa000-a74fa000 rw-p a6cfa000 00:00 0
a74fa000-a74fb000 ---p a74fa000 00:00 0
a74fb000-a7cfb000 rw-p a74fb000 00:00 0
a7cfb000-a7cfc000 ---p a7cfb000 00:00 0
a7cfc000-a84fc000 rw-p a7cfc000 00:00 0
a84fc000-a84fd000 ---p a84fc000 00:00 0
a84fd000-a8cfd000 rw-p a84fd000 00:00 0
a8cfd000-a8cfe000 ---p a8cfd000 00:00 0
a8cfe000-a94fe000 rw-p a8cfe000 00:00 0
a94fe000-a94ff000 ---p a94fe000 00:00 0
a94ff000-a9cff000 rw-p a94ff000 00:00 0
a9cff000-a9d00000 ---p a9cff000 00:00 0
a9d00000-aa500000 rw-p a9d00000 00:00 0
aa500000-aa525000 rw-p aa500000 00:00 0
aa525000-aa600000 ---p aa525000 00:00 0
aa6ea000-aa6eb000 ---p aa6ea000 00:00 0
aa6eb000-aaeeb000 rw-p aa6eb000 00:00 0
aaeeb000-aaeec000 ---p aaeeb000 00:00 0
aaeec000-ab6ec000 rw-p aaeec000 00:00 0
ab6ec000-ab6ed000 ---p ab6ec000 00:00 0
ab6ed000-abeed000 rw-p ab6ed000 00:00 0
abeed000-abeee000 ---p abeed000 00:00 0
abeee000-ac6ee000 rw-p abeee000 00:00 0
ac6ee000-ac6ef000 ---p ac6ee000 00:00 0
ac6ef000-aceef000 rw-p ac6ef000 00:00 0
aceef000-acef0000 ---p aceef000 00:00 0
acef0000-ad6f0000 rw-p acef0000 00:00 0
ad6f0000-ad6f1000 ---p ad6f0000 00:00 0
ad6f1000-adef1000 rw-p ad6f1000 00:00 0
adef1000-adef2000 ---p adef1000 00:00 0
adef2000-ae6f2000 rw-p adef2000 00:00 0
ae6f2000-ae6f3000 ---p ae6f2000 00:00 0
ae6f3000-aeef3000 rw-p ae6f3000 00:00 0
aeef3000-aeef4000 ---p aeef3000 00:00 0
aeef4000-af6f4000 rw-p aeef4000 00:00 0
af6f4000-af6f5000 ---p af6f4000 00:00 0
af6f5000-afef5000 rw-p af6f5000 00:00 0
afef5000-afef6000 ---p afef5000 00:00 0
afef6000-b06f6000 rw-p afef6000 00:00 0
b06f6000-b06f7000 ---p b06f6000 00:00 0
b06f7000-b0ef7000 rw-p b06f7000 00:00 0
b0ef7000-b0ef8000 ---p b0ef7000 00:00 0
b0ef8000-b16f8000 rw-p b0ef8000 00:00 0
b16f8000-b16f9000 ---p b16f8000 00:00 0
b16f9000-b1ef9000 rw-p b16f9000 00:00 0
b1ef9000-b1efa000 ---p b1ef9000 00:00 0
b1efa000-b26fa000 rw-p b1efa000 00:00 0
b26fa000-b26fb000 ---p b26fa000 00:00 0
b26fb000-b2efb000 rw-p b26fb000 00:00 0
b2efb000-b2efc000 ---p b2efb000 00:00 0
b2efc000-b36fc000 rw-p b2efc000 00:00 0
b36fc000-b36fd000 ---p b36fc000 00:00 0
b36fd000-b3efd000 rw-p b36fd000 00:00 0
b3efd000-b3efe000 ---p b3efd000 00:00 0
b3efe000-b46fe000 rw-p b3efe000 00:00 0
b46fe000-b46ff000 ---p b46fe000 00:00 0
b46ff000-b4eff000 rw-p b46ff000 00:00 0
b4eff000-b4f00000 ---p b4eff000 00:00 0
b4f00000-b5700000 rw-p b4f00000 00:00 0
b5700000-b5746000 rw-p b5700000 00:00 0
b5746000-b5800000 ---p b5746000 00:00 0
b58fe000-b58ff000 ---p b58fe000 00:00 0
b58ff000-b60ff000 rw-p b58ff000 00:00 0
b60ff000-b6100000 ---p b60ff000 00:00 0
b6100000-b6900000 rw-p b6100000 00:00 0
b6900000-b6945000 rw-p b6900000 00:00 0
b6945000-b6a00000 ---p b6945000 00:00 0
b6a75000-b6a76000 ---p b6a75000 00:00 0
b6a76000-b7276000 rw-p b6a76000 00:00 0
b7276000-b727d000 r--s 00000000 08:01 4269936 /usr/lib/gconv/gconv-modules.ca che
b727d000-b72bc000 r--p 00000000 08:01 4292628 /usr/lib/locale/en_US.utf8/LC_C TYPE
b72bc000-b72c6000 r-xp 00000000 08:01 4300960 /lib/tls/i686/cmov/libnss_files -2.8.90.so
b72c6000-b72c7000 r--p 00009000 08:01 4300960 /lib/tls/i686/cmov/libnss_files -2.8.90.so
b72c7000-b72c8000 rw-p 0000a000 08:01 4300960 /lib/tls/i686/cmov/libnss_files -2.8.90.so
b72c8000-b72d5000 r-xp 00000000 08:01 4300815 /lib/libgcc_s.so.1
b72d5000-b72d6000 r--p 0000c000 08:01 4300815 /lib/libgcc_s.so.1
b72d6000-b72d7000 rw-p 0000d000 08:01 4300815 /lib/libgcc_s.so.1
b72dc000-b72dd000 ---p b72dc000 00:00 0
b72dd000-b7adf000 rw-p b72dd000 00:00 0
b7adf000-b7ae1000 r-xp 00000000 08:01 4300953 /lib/tls/i686/cmov/libdl-2.8.90 .so
b7ae1000-b7ae2000 r--p 00001000 08:01 4300953 /lib/tls/i686/cmov/libdl-2.8.90 .so
b7ae2000-b7ae3000 rw-p 00002000 08:01 4300953 /lib/tls/i686/cmov/libdl-2.8.90 .so
b7ae3000-b7c3b000 r-xp 00000000 08:01 4300948 /lib/tls/i686/cmov/libc-2.8.90. so
b7c3b000-b7c3d000 r--p 00158000 08:01 4300948 /lib/tls/i686/cmov/libc-2.8.90. so
b7c3d000-b7c3e000 rw-p 0015a000 08:01 4300948 /lib/tls/i686/cmov/libc-2.8.90. so
b7c3e000-b7c42000 rw-p b7c3e000 00:00 0
b7c42000-b7c66000 r-xp 00000000 08:01 4300954 /lib/tls/i686/cmov/libm-2.8.90. so
b7c66000-b7c67000 r--p 00023000 08:01 4300954 /lib/tls/i686/cmov/libm-2.8.90. so
b7c67000-b7c68000 rw-p 00024000 08:01 4300954 /lib/tls/i686/cmov/libm-2.8.90. so
b7c68000-b7c7d000 r-xp 00000000 08:01 4300966 /lib/tls/i686/cmov/libpthread-2 .8.90.so
b7c7d000-b7c7e000 r--p 00014000 08:01 4300966 /lib/tls/i686/cmov/libpthread-2 .8.90.so
b7c7e000-b7c7f000 rw-p 00015000 08:01 4300966 /lib/tls/i686/cmov/libpthread-2 .8.90.so
b7c7f000-b7c81000 rw-p b7c7f000 00:00 0
b7c81000-b7c95000 r-xp 00000000 08:01 4269932 /usr/lib/libz.so.1.2.3.3
b7c95000-b7c97000 rw-p 00013000 08:01 4269932 /usr/lib/libz.so.1.2.3.3
b7c97000-b7dc9000 r-xp 00000000 08:01 4285392 /usr/lib/i686/cmov/libcrypto.so .0.9.8
b7dc9000-b7dd1000 r--p 00132000 08:01 4285392 /usr/lib/i686/cmov/libcrypto.so .0.9.8
b7dd1000-b7dde000 rw-p 0013a000 08:01 4285392 /usr/lib/i686/cmov/libcrypto.so .0.9.8
b7dde000-b7de2000 rw-p b7dde000 00:00 0
b7de2000-b7df7000 r-xp 00000000 08:01 4300957 /lib/tls/i686/cmov/libnsl-2.8.9 0.so
b7df7000-b7df8000 r--p 00014000 08:01 4300957 /lib/tls/i686/cmov/libnsl-2.8.9 0.so
b7df8000-b7df9000 rw-p 00015000 08:01 4300957 /lib/tls/i686/cmov/libnsl-2.8.9 0.so
b7df9000-b7dfb000 rw-p b7df9000 00:00 0
b7dfb000-b7e04000 r-xp 00000000 08:01 4300951 /lib/tls/i686/cmov/libcrypt-2.8 .90.so
b7e04000-b7e05000 r--p 00008000 08:01 4300951 /lib/tls/i686/cmov/libcrypt-2.8 .90.so
b7e05000-b7e06000 rw-p 00009000 08:01 4300951 /lib/tls/i686/cmov/libcrypt-2.8 .90.so
b7e06000-b7e2e000 rw-p b7e06000 00:00 0
b7e2e000-b7fcf000 r-xp 00000000 08:01 4271643 /usr/lib/libmysqlclient_r.so.15 .0.0
b7fcf000-b7fd2000 r--p 001a0000 08:01 4271643 /usr/lib/libmysqlclient_r.so.15 .0.0
b7fd2000-b8012000 rw-p 001a3000 08:01 4271643 /usr/lib/libmysqlclient_r.so.15 .0.0
b8012000-b8014000 rw-p b8012000 00:00 0
b8014000-b80a5000 r-xp 00000000 08:01 4269761 /usr/lib/libnetsnmp.so.15.1.0
b80a5000-b80a6000 ---p 00091000 08:01 4269761 /usr/lib/libnetsnmp.so.15.1.0
b80a6000-b80a7000 r--p 00091000 08:01 4269761 /usr/lib/libnetsnmp.so.15.1.0
b80a7000-b80a9000 rw-p 00092000 08:01 4269761 /usr/lib/libnetsnmp.so.15.1.0
b80a9000-b80c7000 rw-p b80a9000 00:00 0
b80ca000-b80ce000 rw-p b80ca000 00:00 0
b80ce000-b80e8000 r-xp 00000000 08:01 4300816 /lib/ld-2.8.90.so
b80e8000-b80e9000 r-xp b80e8000 00:00 0 [vdso]
b80e9000-b80ea000 r--p 0001a000 08:01 4300816 /lib/ld-2.8.90.so
b80ea000-b80eb000 rw-p 0001b000 08:01 4300816 /lib/ld-2.8.90.so
bf9d6000-bf9eb000 rw-p bffeb000 00:00 0 [stack]
Aborted

I also did what you wrote to him about GDB:

gdb spine
b *0x804fc14
quit

and the resulst I get:

(gdb) b *0x804fc14
Breakpoint 1 at 0x804fc14: file poller.c, line 957.
(gdb) quit

[dainiookas]

I also ran debug for the other spine error :

./spine[0x80522fd]

which gave me :

(gdb) b *0x80522fd
Breakpoint 1 at 0x80522fd: file poller.c, line 53.

[/quote]

[dainiookas]

I think I found not a solution, but a way how to overcome this.

This error comes if I compile spine on Ubuntu 8.10...
My production server works on that and I cannot change the release now, but I compiled spine on virtual machine with ubuntu 8.04 and put it to 8.10 ( I know it's a bit creepy, but I had to, because this is running on a massive network ±1800hosts and there is no other way)
I put it to 8.10 and now spine work great (at least for the first five pollings )

Post more results later on....

[sradman]

Can folks here please respond as to whether or not the latest beta2 corrects this issue?

In my env, this does correct the segfault issue but I'm having other issues that I can't pinpoint the cause. I do believe the issues are separate from spine.


CentOS 5 x86_64 using Dag's cacti RPMS and my own rolled RPM for cacti-spine-0.8.7c-beta2 (still running 0.8.7b for the rest of the code).

I had the same segfault issue on CentOS 5.2 x86_64 with cacti-0.8.7b and cacti-spine-0.8.7.c-beta2 resolved it

stefan