Bug#665868: grsecurity kills tvtime

This is a MIME-formatted message.  If you see this text it means that your
E-mail software does not support MIME-formatted messages.

--===============3051883022233637606==
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature";
	boundary="=_static.213-239-213-133.clients.your-server.de-7371-1336403059-0001-2"
Content-Disposition: inline

This is a MIME-formatted message.  If you see this text it means that your
E-mail software does not support MIME-formatted messages.

--=_static.213-239-213-133.clients.your-server.de-7371-1336403059-0001-2
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hello Bart,
On Sun, May 06, 2012 at 07:16:19PM +0000, Bart Martens wrote:
> On Sun, May 06, 2012 at 07:47:45PM +0200, Helge Kreutzmann wrote:
> > Hello Bart,
> > On Sun, May 06, 2012 at 08:00:45AM +0000, Bart Martens wrote:
> > > retitle 665868 grsecurity kills tvtime
> > > severity 665868 wishlist
> >=20
> > Why?
>=20
> Because this title and severity currently fit best, in my opinion.

Ok, your call. I choose important because this looks very much like a
security issue. (As we say here: better be safe than sorry).

> > > Can you find out why grsecurity kills tvtime ?
> >=20
> > Sure, what information do you need?=20
>=20
> Anything that explains why grsecurity kills tvtime.

Ok, I was imprecise:
Which commands do you want me to run? A certain (debug) build? Using
gdb, strace?

I think the explanation of the problem itself is under the given
link. (To be honest, I do not understand it 100% myself atm, probably
because I'm only a casual programmer). The kernel help text says:

By saying Y here the kernel recomputes expressions of function arguments ma=
rked by
a size_overflow attribute with double integer precision
(DImode/TImode for 32/64 bit integer types). The recomputed argument
is checked against INT_MAX and an event is logged on overflow
and the triggering process is killed.

If you want, I could forward this bug to the grsecurity list, maybe
they could provide more information (probably in better terms than I
ever could)?

> > (I disabled this option again as I have no other TV atm., but for
> > Testing I can boot into the old one or build a current 3.2 with the
> > option reanabled).
>=20
> I read that as you can still reproduce the problem.

If you want, I can try with the "latest" kernel (3.2, a few minor
revisions newer). I'll do that on Sunday or late next week (sorry,
lots of travelling atm) at the latest.

> > P.S. I'm currently not at the system in question, but I can try to
> >      check on Sunday, if I got your debug info by then.
>=20
> My debug info ?

Sorry, I'm not a native speaker. I meant (as stated above) the list of
information you need to understand the problem, i.e. gdb output,
strace output, ...

Greetings

        Helge

--=20
      Dr. Helge Kreutzmann                     [email protected]
           Dipl.-Phys.                   http://www.helgefjell.de/debian.php
        64bit GNU powered                     gpg signed mail preferred
           Help keep free software "libre": http://www.ffii.de/

--=_static.213-239-213-133.clients.your-server.de-7371-1336403059-0001-2
Content-Type: application/pgp-signature; name="signature.asc"
Content-Transfer-Encoding: 7bit
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iD8DBQFPp+RzRsxcY/MYpWoRAoqnAJ9pvAL/naEM6QJz7dluJIrar0rbjQCdF4Gu
QZEHkF/FN0cOr1dvCc156us=
=M08W
-----END PGP SIGNATURE-----

--=_static.213-239-213-133.clients.your-server.de-7371-1336403059-0001-2--





--===============3051883022233637606==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
--===============3051883022233637606==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Tvtime-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/tvtime-devel

--===============3051883022233637606==--