[Pkg-gnupg-maint] Bug#771263: gnupg fails (buffer overflow detected) to encrypt archive when called from duplicity

Pandu Rao pandu.rao at gmail.com
Fri Nov 28 01:51:27 UTC 2014


Package: gnupg
Version: 1.4.18-4
Severity: normal

Dear Maintainer,

   * What led up to the situation?
     I was trying to execute duplicity to archive files. Duplicty uses gnupg to encrypt data.

   * What exactly did you do (or not do) that was effective (or
     ineffective)?
     I ran the following duplicity command:
     export PASSPHRASE=<passphrase> && duplicity --encrypt-key=<key-id> --sign-key=<key-id> /path/to/dir scp://<user>@<remote-host>//path/to/remote/dir

   * What was the outcome of this action?

     Local and Remote metadata are synchronized, no sync needed.
     Last full backup date: Mon May  9 22:07:34 2011
     Reuse configured PASSPHRASE as SIGN_PASSPHRASE
     *** buffer overflow detected ***: gpg terminated
     ======= Backtrace: =========
     /lib/x86_64-linux-gnu/libc.so.6(+0x7303f)[0x7f581fd9d03f]
     /lib/x86_64-linux-gnu/libc.so.6(__fortify_fail+0x37)[0x7f581fe20147]
     /lib/x86_64-linux-gnu/libc.so.6(+0xf4360)[0x7f581fe1e360]
     /lib/x86_64-linux-gnu/libc.so.6(+0xf60b7)[0x7f581fe200b7]
     gpg[0x4916c8]
     gpg[0x48b25e]
     gpg[0x48b667]
     gpg[0x48c106]
     gpg[0x48c21e]
     gpg[0x4171d9]
     gpg[0x44f703]
     gpg[0x4a60fb]
     gpg[0x4a6685]
     gpg[0x451901]
     gpg[0x40a0c7]
     /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf5)[0x7f581fd4bb45]
     gpg[0x40a356]
     ======= Memory map: ========
     00400000-004f3000 r-xp 00000000 08:01 12586527                           /usr/bin/gpg
     006f2000-006f3000 r--p 000f2000 08:01 12586527                           /usr/bin/gpg
     006f3000-006f7000 rw-p 000f3000 08:01 12586527                           /usr/bin/gpg
     006f7000-006fa000 rw-p 00000000 00:00 0
     020f4000-02115000 rw-p 00000000 00:00 0                                  [heap]
     7f581f8ea000-7f581f900000 r-xp 00000000 08:01 13896628                   /lib/x86_64-linux-gnu/libgcc_s.so.1
     7f581f900000-7f581faff000 ---p 00016000 08:01 13896628                   /lib/x86_64-linux-gnu/libgcc_s.so.1
     7f581faff000-7f581fb00000 rw-p 00015000 08:01 13896628                   /lib/x86_64-linux-gnu/libgcc_s.so.1
     7f581fb00000-7f581fb26000 r-xp 00000000 08:01 13893741                   /lib/x86_64-linux-gnu/libtinfo.so.5.9
     7f581fb26000-7f581fd25000 ---p 00026000 08:01 13893741                   /lib/x86_64-linux-gnu/libtinfo.so.5.9
     7f581fd25000-7f581fd29000 r--p 00025000 08:01 13893741                   /lib/x86_64-linux-gnu/libtinfo.so.5.9
     7f581fd29000-7f581fd2a000 rw-p 00029000 08:01 13893741                   /lib/x86_64-linux-gnu/libtinfo.so.5.9
     7f581fd2a000-7f581fec9000 r-xp 00000000 08:01 13896633                   /lib/x86_64-linux-gnu/libc-2.19.so
     7f581fec9000-7f58200c9000 ---p 0019f000 08:01 13896633                   /lib/x86_64-linux-gnu/libc-2.19.so
     7f58200c9000-7f58200cd000 r--p 0019f000 08:01 13896633                   /lib/x86_64-linux-gnu/libc-2.19.so
     7f58200cd000-7f58200cf000 rw-p 001a3000 08:01 13896633                   /lib/x86_64-linux-gnu/libc-2.19.so
     7f58200cf000-7f58200d3000 rw-p 00000000 00:00 0
     7f58200d3000-7f58200da000 r-xp 00000000 08:01 13893673                   /lib/x86_64-linux-gnu/libusb-0.1.so.4.4.4
     7f58200da000-7f58202d9000 ---p 00007000 08:01 13893673                   /lib/x86_64-linux-gnu/libusb-0.1.so.4.4.4
     7f58202d9000-7f58202da000 r--p 00006000 08:01 13893673                   /lib/x86_64-linux-gnu/libusb-0.1.so.4.4.4
     7f58202da000-7f58202db000 rw-p 00007000 08:01 13893673                   /lib/x86_64-linux-gnu/libusb-0.1.so.4.4.4
     7f58202db000-7f58202dc000 rw-p 00000000 00:00 0
     7f58202dc000-7f58202df000 r-xp 00000000 08:01 13896636                   /lib/x86_64-linux-gnu/libdl-2.19.so
     7f58202df000-7f58204de000 ---p 00003000 08:01 13896636                   /lib/x86_64-linux-gnu/libdl-2.19.so
     7f58204de000-7f58204df000 r--p 00002000 08:01 13896636                   /lib/x86_64-linux-gnu/libdl-2.19.so
     7f58204df000-7f58204e0000 rw-p 00003000 08:01 13896636                   /lib/x86_64-linux-gnu/libdl-2.19.so
     7f58204e0000-7f5820520000 r-xp 00000000 08:01 13893665                   /lib/x86_64-linux-gnu/libreadline.so.6.3
     7f5820520000-7f5820720000 ---p 00040000 08:01 13893665                   /lib/x86_64-linux-gnu/libreadline.so.6.3
     7f5820720000-7f5820722000 r--p 00040000 08:01 13893665                   /lib/x86_64-linux-gnu/libreadline.so.6.3
     7f5820722000-7f5820729000 rw-p 00042000 08:01 13893665                   /lib/x86_64-linux-gnu/libreadline.so.6.3
     7f5820729000-7f582072a000 rw-p 00000000 00:00 0
     7f582072a000-7f5820739000 r-xp 00000000 08:01 13893650                   /lib/x86_64-linux-gnu/libbz2.so.1.0.4
     7f5820739000-7f5820938000 ---p 0000f000 08:01 13893650                   /lib/x86_64-linux-gnu/libbz2.so.1.0.4
     7f5820938000-7f5820939000 r--p 0000e000 08:01 13893650                   /lib/x86_64-linux-gnu/libbz2.so.1.0.4
     7f5820939000-7f582093a000 rw-p 0000f000 08:01 13893650                   /lib/x86_64-linux-gnu/libbz2.so.1.0.4
     7f582093a000-7f5820954000 r-xp 00000000 08:01 13893738                   /lib/x86_64-linux-gnu/libz.so.1.2.8
     7f5820954000-7f5820b53000 ---p 0001a000 08:01 13893738                   /lib/x86_64-linux-gnu/libz.so.1.2.8
     7f5820b53000-7f5820b54000 r--p 00019000 08:01 13893738                   /lib/x86_64-linux-gnu/libz.so.1.2.8
     7f5820b54000-7f5820b55000 rw-p 0001a000 08:01 13893738                   /lib/x86_64-linux-gnu/libz.so.1.2.8
     7f5820b55000-7f5820b69000 r-xp 00000000 08:01 13896647                   /lib/x86_64-linux-gnu/libresolv-2.19.so
     7f5820b69000-7f5820d68000 ---p 00014000 08:01 13896647                   /lib/x86_64-linux-gnu/libresolv-2.19.so
     7f5820d68000-7f5820d69000 r--p 00013000 08:01 13896647                   /lib/x86_64-linux-gnu/libresolv-2.19.so
     7f5820d69000-7f5820d6a000 rw-p 00014000 08:01 13896647                   /lib/x86_64-linux-gnu/libresolv-2.19.so
     7f5820d6a000-7f5820d6c000 rw-p 00000000 00:00 0
     7f5820d6c000-7f5820d8c000 r-xp 00000000 08:01 13896630                   /lib/x86_64-linux-gnu/ld-2.19.so
     7f5820f69000-7f5820f6e000 rw-p 00000000 00:00 0
     7f5820f80000-7f5820f82000 rw-p 00000000 00:00 0
     7f5820f82000-7f5820f8a000 rw-p 00000000 00:00 0
     7f5820f8a000-7f5820f8c000 rw-p 00000000 00:00 0
     7f5820f8c000-7f5820f8d000 r--p 00020000 08:01 13896630                   /lib/x86_64-linux-gnu/ld-2.19.so
     7f5820f8d000-7f5820f8e000 rw-p 00021000 08:01 13896630                   /lib/x86_64-linux-gnu/ld-2.19.so
     7f5820f8e000-7f5820f8f000 rw-p 00000000 00:00 0
     7ffff3204000-7ffff3225000 rw-p 00000000 00:00 0                          [stack]
     7ffff337c000-7ffff337e000 r-xp 00000000 00:00 0                          [vdso]
     7ffff337e000-7ffff3380000 r--p 00000000 00:00 0                          [vvar]
     ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0                  [vsyscall]
     GPGError: GPG Failed, see log below:
     ===== Begin GnuPG log =====
     ===== End GnuPG log =====

   * What outcome did you expect instead?

     Local and Remote metadata are synchronized, no sync needed.
     Last full backup date: Mon Sep 10 10:02:37 2012
     Reuse configured PASSPHRASE as SIGN_PASSPHRASE
     --------------[ Backup Statistics ]--------------
     StartTime 1417139304.89 (Thu Nov 27 17:48:24 2014)
     EndTime 1417139304.99 (Thu Nov 27 17:48:24 2014)
     ElapsedTime 0.09 (0.09 seconds)
     SourceFiles 1
     SourceFileSize 204800 (200 KB)
     NewFiles 0
     NewFileSize 0 (0 bytes)
     DeletedFiles 0
     ChangedFiles 0
     ChangedFileSize 0 (0 bytes)
     ChangedDeltaSize 0 (0 bytes)
     DeltaEntries 0
     RawDeltaSize 0 (0 bytes)
     TotalDestinationSizeChange 763 (763 bytes)
     Errors 0
     -------------------------------------------------





-- System Information:
Debian Release: jessie/sid
  APT prefers testing-updates
  APT policy: (500, 'testing-updates'), (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16.0-4-amd64 (SMP w/12 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages gnupg depends on:
ii  gpgv          1.4.18-4
ii  libbz2-1.0    1.0.6-7+b1
ii  libc6         2.19-13
ii  libreadline6  6.3-8+b1
ii  libusb-0.1-4  2:0.1.12-25
ii  zlib1g        1:1.2.8.dfsg-2

Versions of packages gnupg recommends:
pn  gnupg-curl     <none>
ii  libldap-2.4-2  2.4.40-2

Versions of packages gnupg suggests:
pn  gnupg-doc     <none>
ii  imagemagick   8:6.8.9.9-3
ii  libpcsclite1  1.8.13-1
pn  parcimonie    <none>

-- no debconf information



More information about the Pkg-gnupg-maint mailing list