Bug#884702: xrdp: Memory corruption in xrdp-sesman

Willem Mulder willemm at scintilla.utwente.nl
Mon Dec 18 12:44:18 UTC 2017


Package: xrdp
Version: 0.9.4-2
Severity: important

Dear Maintainer,

xrdp 0.9.4-2 introduced a memory corruption in xrdp-sesman.
You can find the log of such a crash below.

Kind regards,

Willem Mulder

starting sesman in foreground...
sesman config:
        ListenAddress:            127.0.0.1
        ListenPort:               3350
        EnableUserWindowManager:  1
        UserWindowManager:        startwm.sh
        DefaultWindowManager:     startwm.sh
        AuthFilePath:             disabled
Xvnc parameters:
        Parameter 00                   Xvnc
        Parameter 01                   -bs
        Parameter 02                   -nolisten
        Parameter 03                   tcp
        Parameter 04                   -localhost
        Parameter 05                   -dpi
        Parameter 06                   96
X11rdp parameters:
XOrg parameters:
        Parameter 00                   Xorg
        Parameter 01                   -config
        Parameter 02                   xrdp/xorg.conf
        Parameter 03                   -noreset
        Parameter 04                   -nolisten
        Parameter 05                   tcp
security configuration:
        AllowRootLogin:       1
        MaxLoginRetry:        4
        AlwaysGroupCheck:     0
        No TSUsersGroup defined
        No TSAdminsGroup defined
session configuration:
        MaxSessions:                 50
        X11DisplayOffset:            10
        KillDisconnected:            0
        IdleTimeLimit:               0
        DisconnectedTimeLimit:       0
        Policy:       0
SessionVariables parameters:
  Parameter 00                   PULSE_SCRIPT=/etc/xrdp/pulse/default.pa
[20171218-13:35:14] [DEBUG] libscp initialized
[20171218-13:35:15] [INFO ] starting xrdp-sesman with pid 2477
[20171218-13:35:15] [INFO ] listening to port 3350 on 127.0.0.1
[20171218-13:35:49] [INFO ] A connection received from ::1 port 45828
*** Error in `/usr/sbin/xrdp-sesman': malloc(): memory corruption: 0x00005616996b1ca0 ***
======= Backtrace: =========
/lib/x86_64-linux-gnu/libc.so.6(+0x7230b)[0x7f2ad67ae30b]
/lib/x86_64-linux-gnu/libc.so.6(+0x7896e)[0x7f2ad67b496e]
/lib/x86_64-linux-gnu/libc.so.6(+0x7aa59)[0x7f2ad67b6a59]
/lib/x86_64-linux-gnu/libc.so.6(__libc_calloc+0x27b)[0x7f2ad67b926b]
/usr/lib/x86_64-linux-gnu/xrdp/libcommon.so.0(g_strdup+0x1d)[0x7f2ad71231cd]
/usr/lib/x86_64-linux-gnu/xrdp/libscp.so.0(scp_session_set_client_ip+0x2a)[0x7f2ad6f0d98a]
/usr/lib/x86_64-linux-gnu/xrdp/libscp.so.0(scp_v0s_accept+0x5f6)[0x7f2ad6f0e8f6]
/usr/sbin/xrdp-sesman(+0x516d)[0x56169912616d]
/usr/sbin/xrdp-sesman(+0x5f6b)[0x561699126f6b]
/usr/sbin/xrdp-sesman(+0x325e)[0x56169912425e]
/lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf1)[0x7f2ad675c561]
/usr/sbin/xrdp-sesman(+0x38aa)[0x5616991248aa]
======= Memory map: ========
561699121000-56169912c000 r-xp 00000000 fe:00 413854                     /usr/sbin/xrdp-sesman
56169932c000-56169932d000 r--p 0000b000 fe:00 413854                     /usr/sbin/xrdp-sesman
56169932d000-56169932e000 rw-p 0000c000 fe:00 413854                     /usr/sbin/xrdp-sesman
5616996b1000-5616996d2000 rw-p 00000000 00:00 0                          [heap]
7f2ad0000000-7f2ad0021000 rw-p 00000000 00:00 0
7f2ad0021000-7f2ad4000000 ---p 00000000 00:00 0
7f2ad4075000-7f2ad408b000 r-xp 00000000 fe:00 530024                     /lib/x86_64-linux-gnu/libgcc_s.so.1
7f2ad408b000-7f2ad428a000 ---p 00016000 fe:00 530024                     /lib/x86_64-linux-gnu/libgcc_s.so.1
7f2ad428a000-7f2ad428b000 r--p 00015000 fe:00 530024                     /lib/x86_64-linux-gnu/libgcc_s.so.1
7f2ad428b000-7f2ad428c000 rw-p 00016000 fe:00 530024                     /lib/x86_64-linux-gnu/libgcc_s.so.1
7f2ad428c000-7f2ad42fc000 r-xp 00000000 fe:00 525370                     /lib/x86_64-linux-gnu/libpcre.so.3.13.3
7f2ad42fc000-7f2ad44fc000 ---p 00070000 fe:00 525370                     /lib/x86_64-linux-gnu/libpcre.so.3.13.3
7f2ad44fc000-7f2ad44fd000 r--p 00070000 fe:00 525370                     /lib/x86_64-linux-gnu/libpcre.so.3.13.3
7f2ad44fd000-7f2ad44fe000 rw-p 00071000 fe:00 525370                     /lib/x86_64-linux-gnu/libpcre.so.3.13.3
7f2ad44fe000-7f2ad4523000 r-xp 00000000 fe:00 527065                     /lib/x86_64-linux-gnu/libselinux.so.1
7f2ad4523000-7f2ad4722000 ---p 00025000 fe:00 527065                     /lib/x86_64-linux-gnu/libselinux.so.1
7f2ad4722000-7f2ad4723000 r--p 00024000 fe:00 527065                     /lib/x86_64-linux-gnu/libselinux.so.1
7f2ad4723000-7f2ad4724000 rw-p 00025000 fe:00 527065                     /lib/x86_64-linux-gnu/libselinux.so.1
7f2ad4724000-7f2ad4726000 rw-p 00000000 00:00 0
7f2ad4726000-7f2ad475d000 r-xp 00000000 fe:00 528253                     /lib/x86_64-linux-gnu/libnss_systemd.so.2
7f2ad475d000-7f2ad495c000 ---p 00037000 fe:00 528253                     /lib/x86_64-linux-gnu/libnss_systemd.so.2
7f2ad495c000-7f2ad495f000 r--p 00036000 fe:00 528253                     /lib/x86_64-linux-gnu/libnss_systemd.so.2
7f2ad495f000-7f2ad4960000 rw-p 00039000 fe:00 528253                     /lib/x86_64-linux-gnu/libnss_systemd.so.2
7f2ad4960000-7f2ad4f7d000 r--s 00000000 fe:00 525235                     /var/lib/sss/mc/group
7f2ad4f7d000-7f2ad4f85000 r-xp 00000000 fe:00 533263                     /lib/x86_64-linux-gnu/libnss_sss.so.2
7f2ad4f85000-7f2ad5184000 ---p 00008000 fe:00 533263                     /lib/x86_64-linux-gnu/libnss_sss.so.2
7f2ad5184000-7f2ad5185000 r--p 00007000 fe:00 533263                     /lib/x86_64-linux-gnu/libnss_sss.so.2
7f2ad5185000-7f2ad5186000 rw-p 00008000 fe:00 533263                     /lib/x86_64-linux-gnu/libnss_sss.so.2
7f2ad5186000-7f2ad5191000 r-xp 00000000 fe:00 552699                     /lib/x86_64-linux-gnu/libnss_files-2.25.so
7f2ad5191000-7f2ad5390000 ---p 0000b000 fe:00 552699                     /lib/x86_64-linux-gnu/libnss_files-2.25.so
7f2ad5390000-7f2ad5391000 r--p 0000a000 fe:00 552699                     /lib/x86_64-linux-gnu/libnss_files-2.25.so
7f2ad5391000-7f2ad5392000 rw-p 0000b000 fe:00 552699                     /lib/x86_64-linux-gnu/libnss_files-2.25.so
7f2ad5392000-7f2ad5398000 rw-p 00000000 00:00 0
7f2ad5398000-7f2ad53a3000 r-xp 00000000 fe:00 552703                     /lib/x86_64-linux-gnu/libnss_nis-2.25.so
7f2ad53a3000-7f2ad55a2000 ---p 0000b000 fe:00 552703                     /lib/x86_64-linux-gnu/libnss_nis-2.25.so
7f2ad55a2000-7f2ad55a3000 r--p 0000a000 fe:00 552703                     /lib/x86_64-linux-gnu/libnss_nis-2.25.so
7f2ad55a3000-7f2ad55a4000 rw-p 0000b000 fe:00 552703                     /lib/x86_64-linux-gnu/libnss_nis-2.25.so
7f2ad55a4000-7f2ad55b9000 r-xp 00000000 fe:00 552694                     /lib/x86_64-linux-gnu/libnsl-2.25.so
7f2ad55b9000-7f2ad57b8000 ---p 00015000 fe:00 552694                     /lib/x86_64-linux-gnu/libnsl-2.25.so
7f2ad57b8000-7f2ad57b9000 r--p 00014000 fe:00 552694                     /lib/x86_64-linux-gnu/libnsl-2.25.so
7f2ad57b9000-7f2ad57ba000 rw-p 00015000 fe:00 552694                     /lib/x86_64-linux-gnu/libnsl-2.25.so
7f2ad57ba000-7f2ad57bc000 rw-p 00000000 00:00 0
7f2ad57bc000-7f2ad57c3000 r-xp 00000000 fe:00 552695                     /lib/x86_64-linux-gnu/libnss_compat-2.25.so
7f2ad57c3000-7f2ad59c2000 ---p 00007000 fe:00 552695                     /lib/x86_64-linux-gnu/libnss_compat-2.25.so
7f2ad59c2000-7f2ad59c3000 r--p 00006000 fe:00 552695                     /lib/x86_64-linux-gnu/libnss_compat-2.25.so
7f2ad59c3000-7f2ad59c4000 rw-p 00007000 fe:00 552695                     /lib/x86_64-linux-gnu/libnss_compat-2.25.so
7f2ad5a0e000-7f2ad5a12000 r-xp 00000000 fe:00 527197                     /lib/x86_64-linux-gnu/libcap-ng.so.0.0.0
7f2ad5a12000-7f2ad5c11000 ---p 00004000 fe:00 527197                     /lib/x86_64-linux-gnu/libcap-ng.so.0.0.0
7f2ad5c11000-7f2ad5c12000 r--p 00003000 fe:00 527197                     /lib/x86_64-linux-gnu/libcap-ng.so.0.0.0
7f2ad5c12000-7f2ad5c13000 rw-p 00004000 fe:00 527197                     /lib/x86_64-linux-gnu/libcap-ng.so.0.0.0
7f2ad5c13000-7f2ad5c30000 r-xp 00000000 fe:00 526497                     /lib/x86_64-linux-gnu/libaudit.so.1.0.0
7f2ad5c30000-7f2ad5e30000 ---p 0001d000 fe:00 526497                     /lib/x86_64-linux-gnu/libaudit.so.1.0.0
7f2ad5e30000-7f2ad5e31000 r--p 0001d000 fe:00 526497                     /lib/x86_64-linux-gnu/libaudit.so.1.0.0
7f2ad5e31000-7f2ad5e32000 rw-p 0001e000 fe:00 526497                     /lib/x86_64-linux-gnu/libaudit.so.1.0.0
7f2ad5e32000-7f2ad5e3c000 rw-p 00000000 00:00 0
7f2ad5e3c000-7f2ad5e3f000 r-xp 00000000 fe:00 552690                     /lib/x86_64-linux-gnu/libdl-2.25.so
7f2ad5e3f000-7f2ad603e000 ---p 00003000 fe:00 552690                     /lib/x86_64-linux-gnu/libdl-2.25.so
7f2ad603e000-7f2ad603f000 r--p 00002000 fe:00 552690                     /lib/x86_64-linux-gnu/libdl-2.25.so
7f2ad603f000-7f2ad6040000 rw-p 00003000 fe:00 552690                     /lib/x86_64-linux-gnu/libdl-2.25.so
7f2ad6040000-7f2ad62a2000 r-xp 00000000 fe:00 396663                     /usr/lib/x86_64-linux-gnu/libcrypto.so.1.1
7f2ad62a2000-7f2ad64a2000 ---p 00262000 fe:00 396663                     /usr/lib/x86_64-linux-gnu/libcrypto.so.1.1
7f2ad64a2000-7f2ad64c0000 r--p 00262000 fe:00 396663                     /usr/lib/x86_64-linux-gnu/libcrypto.so.1.1
7f2ad64c0000-7f2ad64ce000 rw-p 00280000 fe:00 396663                     /usr/lib/x86_64-linux-gnu/libcrypto.so.1.1
7f2ad64ce000-7f2ad64d1000 rw-p 00000000 00:00 0
7f2ad64d1000-7f2ad6533000 r-xp 00000000 fe:00 396664                     /usr/lib/x86_64-linux-gnu/libssl.so.1.1
7f2ad6533000-7f2ad6732000 ---p 00062000 fe:00 396664                     /usr/lib/x86_64-linux-gnu/libssl.so.1.1
7f2ad6732000-7f2ad6736000 r--p 00061000 fe:00 396664                     /usr/lib/x86_64-linux-gnu/libssl.so.1.1
7f2ad6736000-7f2ad673c000 rw-p 00065000 fe:00 396664                     /usr/lib/x86_64-linux-gnu/libssl.so.1.1
7f2ad673c000-7f2ad68d5000 r-xp 00000000 fe:00 552581                     /lib/x86_64-linux-gnu/libc-2.25.so
7f2ad68d5000-7f2ad6ad5000 ---p 00199000 fe:00 552581                     /lib/x86_64-linux-gnu/libc-2.25.so
7f2ad6ad5000-7f2ad6ad9000 r--p 00199000 fe:00 552581                     /lib/x86_64-linux-gnu/libc-2.25.so
7f2ad6ad9000-7f2ad6adb000 rw-p 0019d000 fe:00 552581                     /lib/x86_64-linux-gnu/libc-2.25.so
7f2ad6adb000-7f2ad6adf000 rw-p 00000000 00:00 0
7f2ad6adf000-7f2ad6af8000 r-xp 00000000 fe:00 552709                     /lib/x86_64-linux-gnu/libpthread-2.25.so
7f2ad6af8000-7f2ad6cf7000 ---p 00019000 fe:00 552709                     /lib/x86_64-linux-gnu/libpthread-2.25.so
7f2ad6cf7000-7f2ad6cf8000 r--p 00018000 fe:00 552709                     /lib/x86_64-linux-gnu/libpthread-2.25.so
7f2ad6cf8000-7f2ad6cf9000 rw-p 00019000 fe:00 552709                     /lib/x86_64-linux-gnu/libpthread-2.25.so
7f2ad6cf9000-7f2ad6cfd000 rw-p 00000000 00:00 0
7f2ad6cfd000-7f2ad6d0a000 r-xp 00000000 fe:00 526625                     /lib/x86_64-linux-gnu/libpam.so.0.83.1
7f2ad6d0a000-7f2ad6f09000 ---p 0000d000 fe:00 526625                     /lib/x86_64-linux-gnu/libpam.so.0.83.1
7f2ad6f09000-7f2ad6f0a000 r--p 0000c000 fe:00 526625                     /lib/x86_64-linux-gnu/libpam.so.0.83.1
7f2ad6f0a000-7f2ad6f0b000 rw-p 0000d000 fe:00 526625                     /lib/x86_64-linux-gnu/libpam.so.0.83.1
7f2ad6f0b000-7f2ad6f15000 r-xp 00000000 fe:00 567090                     /usr/lib/x86_64-linux-gnu/xrdp/libscp.so.0.0.0
7f2ad6f15000-7f2ad7115000 ---p 0000a000 fe:00 567090                     /usr/lib/x86_64-linux-gnu/xrdp/libscp.so.0.0.0
7f2ad7115000-7f2ad7116000 r--p 0000a000 fe:00 567090                     /usr/lib/x86_64-linux-gnu/xrdp/libscp.so.0.0.0
7f2ad7116000-7f2ad7117000 rw-p 0000b000 fe:00 567090                     /usr/lib/x86_64-linux-gnu/xrdp/libscp.so.0.0.0
7f2ad7117000-7f2ad712f000 r-xp 00000000 fe:00 567086                     /usr/lib/x86_64-linux-gnu/xrdp/libcommon.so.0.0.0
7f2ad712f000-7f2ad732f000 ---p 00018000 fe:00 567086                     /usr/lib/x86_64-linux-gnu/xrdp/libcommon.so.0.0.0
7f2ad732f000-7f2ad7330000 r--p 00018000 fe:00 567086                     /usr/lib/x86_64-linux-gnu/xrdp/libcommon.so.0.0.0
7f2ad7330000-7f2ad7331000 rw-p 00019000 fe:00 567086                     /usr/lib/x86_64-linux-gnu/xrdp/libcommon.so.0.0.0
7f2ad7331000-7f2ad7354000 r-xp 00000000 fe:00 533784                     /lib/x86_64-linux-gnu/ld-2.25.so
7f2ad7364000-7f2ad74ff000 r--p 00000000 fe:00 408304                     /usr/lib/locale/locale-archive
7f2ad74ff000-7f2ad7506000 rw-p 00000000 00:00 0
7f2ad7517000-7f2ad7518000 rw-p 00000000 00:00 0
7f2ad7518000-7f2ad751f000 r--s 00000000 fe:00 478922                     /usr/lib/x86_64-linux-gnu/gconv/gconv-modules.cache
7f2ad751f000-7f2ad7550000 r--p 00000000 fe:00 397836                     /usr/lib/locale/C.UTF-8/LC_CTYPE
7f2ad7550000-7f2ad7553000 rw-p 00000000 00:00 0
7f2ad7553000-7f2ad7554000 r--p 00022000 fe:00 533784                     /lib/x86_64-linux-gnu/ld-2.25.so
7f2ad7554000-7f2ad7555000 rw-p 00023000 fe:00 533784                     /lib/x86_64-linux-gnu/ld-2.25.so
7f2ad7555000-7f2ad7556000 rw-p 00000000 00:00 0
7ffc5b32c000-7ffc5b34d000 rw-p 00000000 00:00 0                          [stack]
7ffc5b3c5000-7ffc5b3c8000 r--p 00000000 00:00 0                          [vvar]
7ffc5b3c8000-7ffc5b3ca000 r-xp 00000000 00:00 0                          [vdso]
Aborted

-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (700, 'testing'), (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.13.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to en_GB.UTF-8), LANGUAGE=en_GB.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to en_GB.UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages xrdp depends on:
ii  adduser          3.116
ii  libc6            2.25-3
ii  libfuse2         2.9.7-1
ii  libjpeg62-turbo  1:1.5.2-2+b1
ii  libopus0         1.2.1-1
ii  libpam0g         1.1.8-3.6
ii  libssl1.1        1.1.0g-2
ii  libx11-6         2:1.6.4-3
ii  libxfixes3       1:5.0.3-1
ii  libxrandr2       2:1.5.1-1
ii  lsb-base         9.20170808
ii  ssl-cert         1.0.39

Versions of packages xrdp recommends:
ii  fuse      2.9.7-1
ii  xorgxrdp  0.9.4-2

Versions of packages xrdp suggests:
pn  guacamole  <none>

Versions of packages xorgxrdp depends on:
ii  libc6                                  2.25-3
pn  xorg-input-abi-24                      <none>
ii  xserver-xorg-core [xorg-video-abi-23]  2:1.19.5-1

Versions of packages xorgxrdp recommends:
ii  xorg  1:7.7+19

Versions of packages xrdp is related to:
ii  tightvncserver [vnc-server]  1:1.3.9-9
ii  xserver-xorg-legacy          2:1.19.5-1

-- Configuration Files:
/etc/xrdp/reconnectwm.sh changed [not included]
/etc/xrdp/startwm.sh changed [not included]
/etc/xrdp/xrdp.ini [Errno 13] Permission denied: '/etc/xrdp/xrdp.ini'

-- no debconf information



More information about the pkg-remote-team mailing list