Project

General

Profile

Actions

Bug #11250

closed

cls_rbd: invalid read of size 1 from CLS_LOG

Added by Sage Weil about 9 years ago. Updated about 9 years ago.

Status:
Resolved
Priority:
Urgent
Assignee:
-
Target version:
-
% Done:

0%

Source:
Q/A
Tags:
Backport:
Regression:
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:
Crash signature (v1):
Crash signature (v2):

Description

<kind>InvalidRead</kind>
<what>Invalid read of size 1</what>
<stack>
<frame>
<ip>0x6A6B3B1</ip>
<obj>/lib/x86_64-linux-gnu/libc-2.15.so</obj>
<fn>vfprintf</fn>
<dir>/build/buildd/eglibc-2.15/stdio-common</dir>
<file>vfprintf.c</file>
<line>1630</line>
</frame>
<frame>
<ip>0x6B28D8F</ip>
<obj>/lib/x86_64-linux-gnu/libc-2.15.so</obj>
<fn>__vsnprintf_chk</fn>
<dir>/build/buildd/eglibc-2.15/debug</dir>
<file>vsnprintf_chk.c</file>
<line>65</line>
</frame>
<frame>
<ip>0x6F0C27</ip>
<obj>/usr/bin/ceph-osd</obj>
<fn>cls_log</fn>
<dir>/usr/include/x86_64-linux-gnu/bits</dir>
<file>stdio2.h</file>
<line>79</line>
</frame>
<frame>
<ip>0x145E2BE0</ip>
<obj>/usr/lib/rados-classes/libcls_rbd.so</obj>
<fn>metadata_set(void*, ceph::buffer::list*, ceph::buffer::list*)</fn>
<dir>/srv/autobuild-ceph/gitbuilder.git/build/out~/ceph-0.93-871-g000c51d/src/cls/rbd</dir>
<file>cls_rbd.cc</file>
<line>2231</line>
</frame>

which is this line

CLS_LOG(20, "metdata_set key=%s value=%s", it->first.c_str(), it->second.c_str());

probably because bufferlist c_str() doesn't include a null terminator.

/kubuntu@teuthology:/a/sage-2015-03-26_06:44:22-rados-wip-sage-testing-distro-basic-multi/822712

Actions #1

Updated by Josh Durgin about 9 years ago

  • Status changed from New to Resolved
Actions

Also available in: Atom PDF