[Bug 259021] gpart crashes when run in a jail

From: <bugzilla-noreply_at_freebsd.org>
Date: Sat, 09 Oct 2021 08:08:48 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=259021

            Bug ID: 259021
           Summary: gpart crashes when run in a jail
           Product: Base System
           Version: 13.0-RELEASE
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: bin
          Assignee: bugs@FreeBSD.org
          Reporter: fuz@fuz.su
 Attachment #228535 text/plain
         mime type:

Created attachment 228535
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=228535&action=edit
gpart(8) truss log

When run in a jail (an armv7 jail on arm64 FreeBSD 13), gpart crashes with a
segmentation fault.  It appears this is because it fails to load a
configuration but then tries to free the configuration, leading to a null
pointer dereference:

(gdb) r
Starting program: /sbin/gpart 

Program received signal SIGSEGV, Segmentation fault.
0x400c6be8 in delete_config (gp=0x403f94c4) at
/usr/src/lib/libgeom/geom_xml2tree.c:479
479                     LIST_REMOVE(cf, lg_config);
(gdb) backtrace
#0  0x400c6be8 in delete_config (gp=0x403f94c4) at
/usr/src/lib/libgeom/geom_xml2tree.c:479
#1  geom_deletetree (gmp=gmp@entry=0xffffb260) at
/usr/src/lib/libgeom/geom_xml2tree.c:501
#2  0x00024140 in std_available (name=<optimized out>) at
/usr/src/sbin/geom/core/geom.c:854
#3  0x00022594 in get_class (argc=argc@entry=0xffffdacc, argv=<optimized out>,
argv@entry=0xffffdac8)
    at /usr/src/sbin/geom/core/geom.c:654
#4  0x00022030 in main (argc=0, argv=0xffffdb14) at
/usr/src/sbin/geom/core/geom.c:842
quit) 

Attached is a truss log of the same program.

-- 
You are receiving this mail because:
You are the assignee for the bug.