[Aptitude-devel] Bug#819840: aptitude: Segfaults if suspended and foregrounded on virtual linux console

[Axel Beckert]

Package: aptitude
Version: 0.7.8-1

Hi,

aptitude segfaults under the following circumstances:

1. Log in as root on a Linux virtual console, i.e. after pressing
   Ctrl-Alt-F1.

2. Start aptitude in TUI mode, i.e. without any options or parameters.

3. Press Ctrl-Z to suspend aptitude.

4. Enter "fg" on the commandline and press Enter to bring aptitude back
   to the foreground.

5. Segfault.

This does not happen, if

* if tried inside an xterm
* if just TERM is set to "linux", but the terminal is no virtual linux
  console, i.e. "env TERM=linux aptitude" does not exhibit the issue.

Unfortunately I was not able to reproduce the issue under gdb
directly. But this is the backtrace I got out of the core dump:

Reading symbols from /usr/bin/aptitude-curses...Reading symbols from /usr/lib/debug/.build-id/17/b0aa382e98a7c74b766fe389e4e2c494dd8cce.debug...done.
done.

warning: core file may not match specified executable file.
[New LWP 6201]
[New LWP 6202]
[New LWP 6203]
[New LWP 6204]
[New LWP 6219]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
Core was generated by `aptitude'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0  0x00007fe2861e5973 in ?? ()
[Current thread is 1 (Thread 0x7fe28a8d1780 (LWP 6201))]
(gdb) bt
#0  0x00007fe2861e5973 in ?? ()
#1  0x0000ffffffff0000 in ?? ()
#2  0x0000000100001839 in ?? ()
#3  0x0000000008000000 in ?? ()
#4  0x00007fe287fa8b0c in ___vsprintf_chk (s=0x7ffd08eb4380 "", flags=-1416311776, slen=140724753089664, format=0x564aab94cc10 "\260R\266\252JV", 
    args=0x564aa764dc78, args at entry=0x7ffd08eb44c8) at vsprintf_chk.c:85
#5  0x00007fe287fa8a5d in ___sprintf_chk (s=<optimized out>, flags=<optimized out>, slen=<optimized out>, format=<optimized out>) at sprintf_chk.c:31
#6  0x0000564aa764dc78 in ?? ()
#7  0x0000564aab94cc20 in ?? ()
#8  0x00007fe289d335d4 in ?? () from /usr/lib/x86_64-linux-gnu/libcwidget.so.3
#9  0x0000000000000080 in ?? ()
#10 0x00007ffd08eb4b20 in ?? ()
#11 0x0000564aab94cc10 in ?? ()
#12 0x000000000000000d in ?? ()
#13 0xfffffffffffffffc in ?? ()
#14 0x00007fe288af204f in pthread_cond_wait@@GLIBC_2.3.2 () at ../sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:183
#15 0x0000000000000000 in ?? ()
(gdb)

I can reproduce this issue on Debian Sid amd64 with systemd as well as
on Debian Sid armhf with sysvrc (where I noticed it initially).

-- Package-specific info:
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: not available
URL: <http://lists.alioth.debian.org/pipermail/aptitude-devel/attachments/20160403/1feebe6d/attachment.ksh>
-------------- next part --------------

-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (990, 'unstable'), (980, 'unstable-debug'), (600, 'testing'), (111, 'buildd-unstable'), (111, 'buildd-experimental'), (110, 'experimental'), (105, 'experimental-debug')
Architecture: amd64 (x86_64)

Kernel: Linux 4.5.0-trunk-amd64 (SMP w/4 CPU cores)
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages aptitude depends on:
ii  aptitude-common            0.7.8-1
ii  libapt-pkg5.0              1.2.9
ii  libboost-filesystem1.58.0  1.58.0+dfsg-5+b1
ii  libboost-iostreams1.58.0   1.58.0+dfsg-5+b1
ii  libboost-system1.58.0      1.58.0+dfsg-5+b1
ii  libc6                      2.22-5
ii  libcwidget3v5              0.5.17-4+b1
ii  libgcc1                    1:5.3.1-13
ii  libncursesw5               6.0+20160319-1
ii  libsigc++-2.0-0v5          2.8.0-1
ii  libsqlite3-0               3.12.0-1
ii  libstdc++6                 5.3.1-13
ii  libtinfo5                  6.0+20160319-1
ii  libxapian22v5              1.2.22-3

Versions of packages aptitude recommends:
ii  aptitude-doc-en [aptitude-doc]  0.7.8-1
ii  libparse-debianchangelog-perl   1.2.0-8
ii  sensible-utils                  0.0.9

Versions of packages aptitude suggests:
ii  apt-xapian-index  0.47+nmu2
ii  debtags           2.0.2
ii  tasksel           3.34

-- no debconf information