Date: Fri, 12 Jun 1998 17:50:51 -0400 (EDT) From: Leo Bicknell <bicknell@ufp.org> To: FreeBSD-gnats-submit@FreeBSD.ORG Subject: bin/6933: Inetd corrupting pointer. Message-ID: <199806122150.RAA09751@ussenterprise.ufp.org>
next in thread | raw e-mail | index | archive | help
>Number: 6933 >Category: bin >Synopsis: Inetd corrupting a pointer then passing to free. >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Fri Jun 12 15:00:00 PDT 1998 >Last-Modified: >Originator: Leo Bicknell >Organization: United Federation of Planets >Release: FreeBSD 2.2.5-RELEASE i386 >Environment: Seen on FreeBSD 2.2.5 and 2.2.6 systems using "stock" inetd's. >Description: Users connecting to inetd services (eg telnet, pop3) get the message "inetd in free(), warning junk pointer, too low to make sense." This was traced to about line 1043 of /usr/src/lib/libc/stdlib/malloc.c, in the ifree function. It appears inetd is corrupting a pointer, then passing it to free triggering an error. Once this state has been entered all additional inetd services exhibit the same behavior. Inetd must be restarted. >How-To-Repeat: Unknown. Problem has occured 3 times to date with no common elements leading up to the failure. This has happened with three different config files as well, making it unlikely it is a config file anomoly. >Fix: >Audit-Trail: >Unformatted: To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-bugs" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199806122150.RAA09751>