Firefox 3.0.5 成功编译，运行buffer overflow

seenxu

测试了mozilla ftp上的3.0.5 source tarball, 也测试了cvs里面的代码，都能顺利编译通过，但是，只要运行就buffer overflow.

简易编译过程:
* 准备了一个非常基础的 .mozconfig 见[1]
* make -f client.mk build
* 显示成功编译
* 运行obj-@CONFIG_GUESS@/dist/bin/firefox
* 运行显示buffer overflow 输出见[2]


系统信息:
* ubuntu 8.10 amd64
* gcc version 4.3.2 (Ubuntu 4.3.2-1ubuntu12)


[1] .mozconfig

1. 
   
2. mk_add_options MOZ_CO_PROJECT=browser
   
3. mk_add_options MOZ_OBJDIR=@TOPSRCDIR@/obj-@CONFIG_GUESS@
   
4. ac_add_options --enable-application=browser

复制代码

[2] buffer overflow output

1. 
   
2. $ ./obj-x86_64-unknown-linux-gnu/dist/bin/firefox
   
3. *** buffer overflow detected ***: ./obj-x86_64-unknown-linux-gnu/dist/
   
4. bin/firefox-bin terminated
   
5. ======= Backtrace: =========
   
6. /lib/libc.so.6(__fortify_fail+0x37)[0x7f9b42971877]
   
7. /lib/libc.so.6[0x7f9b4296f740]
   
8. /lib/libc.so.6[0x7f9b4296fdfb]
   
9. ./obj-x86_64-unknown-linux-gnu/dist/bin/libxul.so(XRE_GetBinaryPath
   
10. +0x4d)[0x7f9b46de29d7]
    
11. ./obj-x86_64-unknown-linux-gnu/dist/bin/firefox-bin[0x400e9e]
    
12. /lib/libc.so.6(__libc_start_main+0xe6)[0x7f9b42890466]
    
13. ./obj-x86_64-unknown-linux-gnu/dist/bin/firefox-bin[0x400cf9]
    
14. ======= Memory map: ========
    
15. 00400000-00402000 r-xp 00000000 08:05 1309888          /opt/
    
16. build_mozilla/mozilla/obj-x86_64-unknown-linux-gnu/dist/bin/firefox-
    
17. bin
    
18. 00602000-00603000 r--p 00002000 08:05 1309888          /opt/
    
19. build_mozilla/mozilla/obj-x86_64-unknown-linux-gnu/dist/bin/firefox-
    
20. bin
    
21. 00603000-00604000 rw-p 00003000 08:05 1309888          /opt/
    
22. build_mozilla/mozilla/obj-x86_64-unknown-linux-gnu/dist/bin/firefox-
    
23. bin
    
24. 7f9b3e700000-7f9b3e800000 rw-p 7f9b3e700000 00:00 0
    
25. 7f9b3e839000-7f9b3e83e000 r-xp 00000000 08:05 509740   /usr/lib/
    
26. libXdmcp.so.6.0.0
    
27. 7f9b3e83e000-7f9b3ea3d000 ---p 00005000 08:05 509740   /usr/lib/
    
28. libXdmcp.so.6.0.0
    
29. 7f9b3ea3d000-7f9b3ea3e000 rw-p 00004000 08:05 509740   /usr/lib/
    
30. libXdmcp.so.6.0.0
    
31. 7f9b3ea3e000-7f9b3ea40000 r-xp 00000000 08:05 509738   /usr/lib/
    
32. libXau.so.6.0.0
    
33. 7f9b3ea40000-7f9b3ec3f000 ---p 00002000 08:05 509738   /usr/lib/
    
34. libXau.so.6.0.0
    
35. 7f9b3ec3f000-7f9b3ec40000 rw-p 00001000 08:05 509738   /usr/lib/
    
36. libXau.so.6.0.0
    
37. 7f9b3ec40000-7f9b3ec48000 r-xp 00000000 08:05 1816839  /lib/
    
38. librt-2.8.90.so
    
39. 7f9b3ec48000-7f9b3ee47000 ---p 00008000 08:05 1816839  /lib/
    
40. librt-2.8.90.so
    
41. 7f9b3ee47000-7f9b3ee48000 r--p 00007000 08:05 1816839  /lib/
    
42. librt-2.8.90.so
    
43. 7f9b3ee48000-7f9b3ee49000 rw-p 00008000 08:05 1816839  /lib/
    
44. librt-2.8.90.so
    
45. 7f9b3ee49000-7f9b3ee60000 r-xp 00000000 08:05 508816   /usr/lib/
    
46. libICE.so.6.3.0
    
47. 7f9b3ee60000-7f9b3f05f000 ---p 00017000 08:05 508816   /usr/lib/
    
48. libICE.so.6.3.0
    
49. 7f9b3f05f000-7f9b3f061000 rw-p 00016000 08:05 508816   /usr/lib/
    
50. libICE.so.6.3.0
    
51. 7f9b3f061000-7f9b3f064000 rw-p 7f9b3f061000 00:00 0
    
52. 7f9b3f064000-7f9b3f06c000 r-xp 00000000 08:05 509736   /usr/lib/
    
53. libSM.so.6.0.0
    
54. 7f9b3f06c000-7f9b3f26b000 ---p 00008000 08:05 509736   /usr/lib/
    
55. libSM.so.6.0.0
    
56. 7f9b3f26b000-7f9b3f26c000 r--p 00007000 08:05 509736   /usr/lib/
    
57. libSM.so.6.0.0
    
58. 7f9b3f26c000-7f9b3f26d000 rw-p 00008000 08:05 509736   /usr/lib/
    
59. libSM.so.6.0.0
    
60. 7f9b3f26d000-7f9b3f288000 r-xp 00000000 08:05 507416   /usr/lib/
    
61. libxcb.so.1.0.0
    
62. 7f9b3f288000-7f9b3f487000 ---p 0001b000 08:05 507416   /usr/lib/
    
63. libxcb.so.1.0.0
    
64. 7f9b3f487000-7f9b3f488000 r--p 0001a000 08:05 507416   /usr/lib/
    
65. libxcb.so.1.0.0
    
66. 7f9b3f488000-7f9b3f489000 rw-p 0001b000 08:05 507416   /usr/lib/
    
67. libxcb.so.1.0.0
    
68. 7f9b3f489000-7f9b3f48a000 r-xp 00000000 08:05 507689   /usr/lib/libxcb-
    
69. xlib.so.0.0.0
    
70. 7f9b3f48a000-7f9b3f689000 ---p 00001000 08:05 507689   /usr/lib/libxcb-
    
71. xlib.so.0.0.0
    
72. 7f9b3f689000-7f9b3f68a000 r--p 00000000 08:05 507689   /usr/lib/libxcb-
    
73. xlib.so.0.0.0
    
74. 7f9b3f68a000-7f9b3f68b000 rw-p 00001000 08:05 507689   /usr/lib/libxcb-
    
75. xlib.so.0.0.0
    
76. 7f9b3f68b000-7f9b3f6ba000 r-xp 00000000 08:05 1816961  /lib/libpcre.so.
    
77. 3.12.1
    
78. 7f9b3f6ba000-7f9b3f8b9000 ---p 0002f000 08:05 1816961  /lib/libpcre.so.
    
79. 3.12.1
    
80. 7f9b3f8b9000-7f9b3f8ba000 r--p 0002e000 08:05 1816961  /lib/libpcre.so.
    
81. 3.12.1
    
82. 7f9b3f8ba000-7f9b3f8bb000 rw-p 0002f000 08:05 1816961  /lib/libpcre.so.
    
83. 3.12.1
    
84. 7f9b3f8bb000-7f9b3f8d5000 r-xp 00000000 08:05 1390012  /lib/
    
85. libselinux.so.1
    
86. 7f9b3f8d5000-7f9b3fad4000 ---p 0001a000 08:05 1390012  /lib/
    
87. libselinux.so.1
    
88. 7f9b3fad4000-7f9b3fad5000 r--p 00019000 08:05 1390012  /lib/
    
89. libselinux.so.1
    
90. 7f9b3fad5000-7f9b3fad6000 rw-p 0001a000 08:05 1390012  /lib/
    
91. libselinux.so.1
    
92. 7f9b3fad6000-7f9b3fad7000 rw-p 7f9b3fad6000 00:00 0
    
93. 7f9b3fad7000-7f9b3faff000 r-xp 00000000 08:05 621951   /usr/local/lib/
    
94. libpng12.so.0.34.0
    
95. 7f9b3faff000-7f9b3fcfe000 ---p 00028000 08:05 621951   /usr/local/lib/
    
96. libpng12.so.0.34.0
    
97. 7f9b3fcfe000-7f9b3fcff000 r--p 00027000 08:05 621951   /usr/local/lib/
    
98. libpng12.so.0.34.0
    
99. 7f9b3fcff000-7f9b3fd00000 rw-p 00028000 08:05 621951   /usr/local/lib/
    
100. libpng12.so.0.34.0
     
101. 7f9b3fd00000-7f9b3fd42000 r-xp 00000000 08:05 626257   /usr/local/lib/
     
102. libpixman-1.so.0.12.0
     
103. 7f9b3fd42000-7f9b3ff42000 ---p 00042000 08:05 626257   /usr/local/lib/
     
104. libpixman-1.so.0.12.0
     
105. 7f9b3ff42000-7f9b3ff44000 rw-p 00042000 08:05 626257   /usr/local/lib/
     
106. libpixman-1.so.0.12.0
     
107. 7f9b3ff44000-7f9b3ff4d000 r-xp 00000000 08:05 508851   /usr/lib/
     
108. libXcursor.so.1.0.2
     
109. 7f9b3ff4d000-7f9b4014d000 ---p 00009000 08:05 508851   /usr/lib/
     
110. libXcursor.so.1.0.2
     
111. 7f9b4014d000-7f9b4014e000 rw-p 00009000 08:05 508851   /usr/lib/
     
112. libXcursor.so.1.0.2
     
113. 7f9b4014e000-7f9b40155000 r-xp 00000000 08:05 507384   /usr/lib/
     
114. libXrandr.so.2.1.0
     
115. 7f9b40155000-7f9b40354000 ---p 00007000 08:05 507384   /usr/lib/
     
116. libXrandr.so.2.1.0
     
117. 7f9b40354000-7f9b40355000 r--p 00006000 08:05 507384   /usr/lib/
     
118. libXrandr.so.2.1.0
     
119. 7f9b40355000-7f9b40356000 rw-p 00007000 08:05 507384   /usr/lib/
     
120. libXrandr.so.2.1.0
     
121. 7f9b40356000-7f9b4035f000 r-xp 00000000 08:05 508043   /usr/lib/
     
122. libXi.so.6.0.0
     
123. 7f9b4035f000-7f9b4055f000 ---p 00009000 08:05 508043   /usr/lib/
     
124. libXi.so.6.0.0
     
125. 7f9b4055f000-7f9b40560000 r--p 00009000 08:05 508043   /usr/lib/
     
126. libXi.so.6.0.0
     
127. 7f9b40560000-7f9b40561000 rw-p 0000a000 08:05 508043   /usr/lib/
     
128. libXi.so.6.0.0
     
129. 7f9b40561000-7f9b40563000 r-xp 00000000 08:05 507860   /usr/lib/
     
130. libXinerama.so.1.0.0
     
131. 7f9b40563000-7f9b40762000 ---p 00002000 08:05 507860   /usr/lib/
     
132. libXinerama.so.1.0.0
     
133. 7f9b40762000-7f9b40763000 rw-p 00001000 08:05 507860   /usr/lib/
     
134. libXinerama.so.1.0.0
     
135. 7f9b40763000-7f9b40773000 r-xp 00000000 08:05 507663   /usr/lib/
     
136. libXext.so.6.4.0
     
137. 7f9b40773000-7f9b40973000 ---p 00010000 08:05 507663   /usr/lib/
     
138. libXext.so.6.4.0
     
139. 7f9b40973000-7f9b40975000 rw-p 00010000 08:05 507663   /usr/lib/
     
140. libXext.so.6.4.0
     
141. 7f9b40975000-7f9b4099c000 r-xp 00000000 08:05 508029   /usr/lib/
     
142. libexpat.so.1.5.2
     
143. 7f9b4099c000-7f9b40b9c000 ---p 00027000 08:05 508029   /usr/lib/
     
144. libexpat.so.1.5.2
     
145. 7f9b40b9c000-7f9b40b9e000 r--p 00027000 08:05 508029   /usr/lib/
     
146. libexpat.so.1.5.2
     
147. 7f9b40b9e000-7f9b40b9f000 rw-p 00029000 08:05 508029   /usr/lib/
     
148. libexpat.so.1.5.2
     
149. 7f9b40b9f000-7f9b40ba4000 r-xp 00000000 08:05 508040   /usr/lib/
     
150. libXfixes.so.3.1.0
     
151. 7f9b40ba4000-7f9b40da3000 ---p 00005000 08:05 508040   /usr/lib/
     
152. libXfixes.so.3.1.0
     
153. 7f9b40da3000-7f9b40da4000 rw-p 00004000 08:05 508040   /usr/lib/
     
154. libXfixes.so.3.1.0
     
155. 7f9b40da4000-7f9b40da6000 r-xp 00000000 08:05 509752   /usr/lib/
     
156. libXdamage.so.1.1.0
     
157. 7f9b40da6000-7f9b40fa5000 ---p 000Aborted

复制代码

seenxu

bump,

llom

firefox3.0.6在我这里正常运行，我用的是ubuntu7.10,scim输入法，tar.bz中文安装包
这个版本有一个详细历史记录的功能，记录了上网时间，我觉得很人性化，在这里赞一个!

jlj_babydragon

自己编译的firefox是不是不能自动更新？