From owner-freebsd-security@freebsd.org Mon Oct 26 22:30:51 2015 Return-Path: Delivered-To: freebsd-security@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 5DD208745 for ; Mon, 26 Oct 2015 22:30:51 +0000 (UTC) (envelope-from dereks@lifeofadishwasher.com) Received: from mail-qg0-x229.google.com (mail-qg0-x229.google.com [IPv6:2607:f8b0:400d:c04::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 182AA1DE6 for ; Mon, 26 Oct 2015 22:30:50 +0000 (UTC) (envelope-from dereks@lifeofadishwasher.com) Received: by qgbb65 with SMTP id b65so132304412qgb.2 for ; Mon, 26 Oct 2015 15:30:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lifeofadishwasher.com; s=google; h=date:from:to:subject:message-id:references:mime-version :content-type:content-disposition:in-reply-to:user-agent; bh=PvTgq2GqXh13c0heoVh9YXH7IO440C+IiLsQ2XAheEE=; b=b1gWW8WKIQ+XV6syLTiYAI9CywjjtxJcHK/9VgPBWz/xkiAB6op2W4azHNwW+DWeZm jjiG7BdxPV4fAEHupIdCjj8ba65nS49TfDoJbovpQUOMORgoy7yn+jw5vxiK0h4afoOv 24LVzdm8WPDnPx9JD5/ej+ZXKc6uk1rmkmOZs= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:date:from:to:subject:message-id:references :mime-version:content-type:content-disposition:in-reply-to :user-agent; bh=PvTgq2GqXh13c0heoVh9YXH7IO440C+IiLsQ2XAheEE=; b=ZAEGwFdEBNeBOnQs44YXP8lEz8Oa7iLLG9wSNJG1re7IJI82Pdk4yUtANbSBWLJNoM krhAuyoRUa+oz5RdfupBbf4B53mFY8fuwfStkVS3LAuWLEtuQnXw0yvkbVKvaROUJSih UBMO5/uYHkAnc2VZEVbYana/VnwuFle3zuIArIV1VO3kM7BkVCYjHYUN09CwepmkTPwE YOlFNdVCZjFcm7/363twrl0VWaLb+2hdAO+T7UhYYM0Ks4Vk2gbVXzqpEddpehvRjgaZ d91J1l+QieRJNHhDKcNdWpYI4BzvfDvbQyiFXY9C9ryO/I3hpdElLXNhfj973P9TO7YS 2CWg== X-Gm-Message-State: ALoCoQleO0YhHsBB4BAD4+ZI5kFMjHrBnUuFfpmjUusS76NRybo6TM1ztxxFm7s3VPiPM9qA/IFJ X-Received: by 10.140.134.211 with SMTP id 202mr49688002qhg.51.1445898649983; Mon, 26 Oct 2015 15:30:49 -0700 (PDT) Received: from lifeofadishwasher.com (c-71-206-246-125.hsd1.pa.comcast.net. [71.206.246.125]) by smtp.gmail.com with ESMTPSA id h198sm13822928qhc.47.2015.10.26.15.30.48 for (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 26 Oct 2015 15:30:49 -0700 (PDT) Received: by lifeofadishwasher.com (sSMTP sendmail emulation); Mon, 26 Oct 2015 18:30:47 -0400 Date: Mon, 26 Oct 2015 18:30:47 -0400 From: Derek Schrock To: freebsd-security@freebsd.org Subject: Re: FreeBSD Security Advisory FreeBSD-SA-15:25.ntp Message-ID: <20151026223047.GA5688@ircbsd> References: <201510261236.t9QCa2cm044240@think.nginx.com> <20151026155915.GA39073@in-addr.com> <20151026161356.GA1264@ircbsd> <562E6180.5060104@FreeBSD.org> <1277A6B4-29F6-44B5-9342-4B2BDC9F7CFB@schulte.org> <20151026181102.GA1889@ircbsd> <20151026204642.GB39073@in-addr.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20151026204642.GB39073@in-addr.com> User-Agent: Mutt/1.5.24 (2015-08-30) X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Oct 2015 22:30:51 -0000 On Mon, Oct 26, 2015 at 04:46:42PM EDT, Gary Palmer wrote: > > > Here's my backtrace from 9.3 ntpq on amd64 > > % gdb /usr/obj/usr/src/usr.sbin/ntp/ntpq/ntpq ntpq.core > GNU gdb 6.1.1 [FreeBSD] > Copyright 2004 Free Software Foundation, Inc. > GDB is free software, covered by the GNU General Public License, and you are > welcome to change it and/or distribute copies of it under certain conditions. > Type "show copying" to see the conditions. > There is absolutely no warranty for GDB. Type "show warranty" for details. > This GDB was configured as "amd64-marcel-freebsd"...(no debugging symbols found)... > Core was generated by `ntpq'. > Program terminated with signal 6, Aborted. > Reading symbols from /lib/libedit.so.7...(no debugging symbols found)...done. > Loaded symbols for /lib/libedit.so.7 > Reading symbols from /lib/libm.so.5...(no debugging symbols found)...done. > Loaded symbols for /lib/libm.so.5 > Reading symbols from /lib/libcrypto.so.6...(no debugging symbols found)...done. > Loaded symbols for /lib/libcrypto.so.6 > Reading symbols from /lib/libc.so.7...(no debugging symbols found)...done. > Loaded symbols for /lib/libc.so.7 > Reading symbols from /lib/libncurses.so.8...(no debugging symbols found)...done. > Loaded symbols for /lib/libncurses.so.8 > Reading symbols from /libexec/ld-elf.so.1...(no debugging symbols found)...done. > Loaded symbols for /libexec/ld-elf.so.1 > #0 0x0000000801147f1c in kill () from /lib/libc.so.7 > (gdb) bt > #0 0x0000000801147f1c in kill () from /lib/libc.so.7 > #1 0x0000000801146b4b in abort () from /lib/libc.so.7 > #2 0x0000000000418ad7 in isc_error_fatal () > #3 0x0000000000418b2f in isc_error_runtimecheck () > #4 0x0000000000413039 in isc_net_probeipv4 () > #5 0x0000000000411e43 in init_lib () > #6 0x000000000040767b in ntpqmain () > #7 0x0000000000403a61 in _start () > #8 0x0000000800658000 in ?? () > #9 0x0000000000000000 in ?? () > (gdb) > > ntpd is starting OK on the same box, but I have to use a pre-update > copy of ntpq to make sure it's synchronised OK. For some reason, > a pre-update copy of ntpdc doesn't work, just times out. FYI: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=204046