Bug#819337: nethack: crashes during startup in config file parser

[James Cowgill]

Package: nethack-common
Version: 3.6.0-1
Severity: important
Tags: moreinfo
Control: submitter -1 spoof1024 at gmail.com

Forwarded from message:
CAKNmCvUPjq3JW0XscC8YK6K3MXwHJ1E2FKQUETupK6H7OnEGuw at mail.gmail.com

Sent to pkg-games-devel at lists.alioth.debian.org 27th March 2016.

y at d:~$ uname -a
Linux d 4.4.0-1-amd64 #1 SMP Debian 4.4.6-1 (2016-03-17) x86_64
GNU/Linux
y at d:~$ nethack
*** buffer overflow detected ***: /usr/lib/games/nethack/nethack-
console
terminated
======= Backtrace: =========
/lib/x86_64-linux-gnu/libc.so.6(+0x71ff5)[0x7f22847c6ff5]
/lib/x86_64-linux-gnu/libc.so.6(__fortify_fail+0x37)[0x7f228484e347]
/lib/x86_64-linux-gnu/libc.so.6(+0xf7510)[0x7f228484c510]
/usr/lib/games/nethack/nethack-console[0x470e16]
/usr/lib/games/nethack/nethack-console[0x471953]
/usr/lib/games/nethack/nethack-console[0x4e6265]
/usr/lib/games/nethack/nethack-console[0x403900]
/lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf0)[0x7f2284775610]
/usr/lib/games/nethack/nethack-console[0x403ff9]
======= Memory map: ========
00400000-00605000 r-xp 00000000 08:12 658694
/usr/lib/games/nethack/nethack-console
00804000-00805000 r--p 00204000 08:12 658694
/usr/lib/games/nethack/nethack-console
00805000-00817000 rw-p 00205000 08:12 658694
/usr/lib/games/nethack/nethack-console
00817000-00835000 rw-p 00000000 00:00 0
02473000-02494000 rw-p 00000000 00:00 0
 [heap]
7f228433b000-7f2284351000 r-xp 00000000 08:12 3670243
 /lib/x86_64-linux-gnu/libgcc_s.so.1
7f2284351000-7f2284550000 ---p 00016000 08:12 3670243
 /lib/x86_64-linux-gnu/libgcc_s.so.1
7f2284550000-7f2284551000 rw-p 00015000 08:12 3670243
 /lib/x86_64-linux-gnu/libgcc_s.so.1
7f2284551000-7f2284553000 r-xp 00000000 08:12 3670208
 /lib/x86_64-linux-gnu/libdl-2.22.so
7f2284553000-7f2284753000 ---p 00002000 08:12 3670208
 /lib/x86_64-linux-gnu/libdl-2.22.so
7f2284753000-7f2284754000 r--p 00002000 08:12 3670208
 /lib/x86_64-linux-gnu/libdl-2.22.so
7f2284754000-7f2284755000 rw-p 00003000 08:12 3670208
 /lib/x86_64-linux-gnu/libdl-2.22.so
7f2284755000-7f22848ef000 r-xp 00000000 08:12 3670194
 /lib/x86_64-linux-gnu/libc-2.22.so
7f22848ef000-7f2284aef000 ---p 0019a000 08:12 3670194
 /lib/x86_64-linux-gnu/libc-2.22.so
7f2284aef000-7f2284af3000 r--p 0019a000 08:12 3670194
 /lib/x86_64-linux-gnu/libc-2.22.so
7f2284af3000-7f2284af5000 rw-p 0019e000 08:12 3670194
 /lib/x86_64-linux-gnu/libc-2.22.so
7f2284af5000-7f2284af9000 rw-p 00000000 00:00 0
7f2284af9000-7f2284b1f000 r-xp 00000000 08:12 3670327
 /lib/x86_64-linux-gnu/libtinfo.so.5.9
7f2284b1f000-7f2284d1e000 ---p 00026000 08:12 3670327
 /lib/x86_64-linux-gnu/libtinfo.so.5.9
7f2284d1e000-7f2284d22000 r--p 00025000 08:12 3670327
 /lib/x86_64-linux-gnu/libtinfo.so.5.9
7f2284d22000-7f2284d23000 rw-p 00029000 08:12 3670327
 /lib/x86_64-linux-gnu/libtinfo.so.5.9
7f2284d23000-7f2284d45000 r-xp 00000000 08:12 3670034
 /lib/x86_64-linux-gnu/libncurses.so.5.9
7f2284d45000-7f2284f44000 ---p 00022000 08:12 3670034
 /lib/x86_64-linux-gnu/libncurses.so.5.9
7f2284f44000-7f2284f45000 r--p 00021000 08:12 3670034
 /lib/x86_64-linux-gnu/libncurses.so.5.9
7f2284f45000-7f2284f46000 rw-p 00022000 08:12 3670034
 /lib/x86_64-linux-gnu/libncurses.so.5.9
7f2284f46000-7f2284f68000 r-xp 00000000 08:12 3670070
 /lib/x86_64-linux-gnu/ld-2.22.so
7f228514b000-7f228514f000 rw-p 00000000 00:00 0
7f2285163000-7f2285167000 rw-p 00000000 00:00 0
7f2285167000-7f2285168000 r--p 00021000 08:12 3670070
 /lib/x86_64-linux-gnu/ld-2.22.so
7f2285168000-7f2285169000 rw-p 00022000 08:12 3670070
 /lib/x86_64-linux-gnu/ld-2.22.so
7f2285169000-7f228516a000 rw-p 00000000 00:00 0
7fff0bc74000-7fff0bc95000 rw-p 00000000 00:00 0
 [stack]
7fff0bd8e000-7fff0bd90000 r--p 00000000 00:00 0
 [vvar]
7fff0bd90000-7fff0bd92000 r-xp 00000000 00:00 0
 [vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0
 [vsyscall]
Aborted
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: This is a digitally signed message part
URL: <http://lists.alioth.debian.org/pipermail/pkg-games-devel/attachments/20160326/e540d9d8/attachment.sig>