Bug#716506: [Mayhem] Bug report on nco: ncbo crashes with exit status 139

[Charlie Zender]

Hi,

I am the NCO (package name nco) author/maintainer.
I am unsure how/if to respond to these Mayhem bug reports.
NCO is a set of command line operators written in C99.
When they receive incorrect input options, they die with
exit(EXIT_FAILURE), as recommended (I believe) by the C-standard.
Is there some other way they should die when given incorrect input?

Thanks!
cz

Le 10/07/2013 12:34, Alexandre Rebert a écrit :
> Package: nco
> Version: 4.0.9-1+b1
> Severity: normal
> User: mayhem at forallsecure.com
> Usertags: mayhem
> 
> ncbo crashes with exit status 139. We confirmed the crash by
> re-running it in a fresh debian unstable installation.
> 
> The attachment [1] contains a testcase (under ./crash) crashing the
> program. It ensures that you can easily reproduce the bug. Additionally,
> under ./crash_info/, we include more information about the crash such as
> a core dump, the dmesg generated by the crash, and its output.
> 
> Regards,
> The Mayhem Team (Alexandre Rebert, Thanassis Avgerinos, Sang Kil Cha, David Brumley, Manuel Egele)
> Cylab, Carnegie Mellon University
> 
> [1] http://www.forallsecure.com/bug-reports/427fd7430637448139f0fe0efa958d82e43894b7/full_report
> 
> 
> -- System Information:
> Debian Release: jessie/sid
>   APT prefers unstable
>   APT policy: (500, 'unstable')
> Architecture: i386 (i686)
> 
> Kernel: Linux 3.9-1-686-pae (SMP w/1 CPU core)
> Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
> Shell: /bin/sh linked to /bin/dash
> 
> Versions of packages nco depends on:
> ii  dpkg             1.16.10
> ii  install-info     5.1.dfsg.1-3
> ii  libc6            2.17-6
> ii  libcurl3-gnutls  7.31.0-1
> ii  libgcc1          1:4.8.1-4
> ii  libgsl0ldbl      1.15+dfsg.2-2
> ii  libnetcdfc7      1:4.1.3-6+b1
> ii  libstdc++6       4.8.1-4
> ii  libudunits2-0    2.1.23-4
> 
> nco recommends no packages.
> 
> nco suggests no packages.
> 
> -- no debconf information
> 

-- 
Charlie Zender, Earth System Sci. & Computer Sci.
University of California, Irvine 949-891-2429 )'(