Debian Bug report logs - #401950
nexuiz: double free, memory errors

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Jiří Paleček <jpalecek@web.de>

To: "submit@bugs.debian.org" <submit@bugs.debian.org>

Subject: nexuiz: double free, memory errors

Date: Thu, 07 Dec 2006 00:08:10 +0100

[Message part 1 (text/plain, inline)]

Package: nexuiz
Version: 2.1-1
Severity: normal

Hello,

when I start nexuiz, it terminates with a detected error (double free).
The output of such run is in the attached file nexuiz.out.

I also ran nexuiz under valgrind, which shows even more memory errors.

Regards
    Jiri Palecek

-- System Information:
Debian Release: 4.0
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/dash
Kernel: Linux 2.6.17.3
Locale: LANG=C, LC_CTYPE=C (charmap=ISO-8859-2) (ignored: LC_ALL set to  
cs_CZ)

Versions of packages nexuiz depends on:
ii  libc6                     2.5-0exp3      GNU C Library: Shared  
libraries
ii  libcurl3                  7.15.5-1       Multi-protocol file transfer  
libra
ii  libsdl1.2debian           1.2.11-7       Simple DirectMedia Layer
ii  libvorbisfile3            1.1.2.dfsg-1.2 The Vorbis General Audio  
Compressi
ii  nexuiz-data               2.1-1          Nexuiz game data files

Versions of packages nexuiz recommends:
pn  nexuiz-music                  <none>     (no description available)
pn  xqf                           <none>     (no description available)

-- no debconf information

[nexuiz.3753 (application/octet-stream, attachment)]

[nexuiz.out (application/octet-stream, attachment)]

Message #10 received at 401950@bugs.debian.org (full text, mbox, reply):

From: Gonéri Le Bouder <goneri@rulezlan.org>

To: 401950@bugs.debian.org

Subject: re: nexuiz: double free, memory errors

Date: Thu, 7 Dec 2006 19:12:48 +0100

[Message part 1 (text/plain, inline)]

Hi,

Can you be more precis about your graphic configuration (laptop?, mem, 
cpu, ...). Which graphic driver and card do you use? Please attach your 
xorg.conf?

Best regards,

	Gonéri

[Message part 2 (application/pgp-signature, inline)]

Message #15 received at 401950@bugs.debian.org (full text, mbox, reply):

From: Bruno Kleinert <fuddl@gmx.de>

To: 401950@bugs.debian.org

Cc: Jiří Paleček <jpalecek@web.de>

Subject: Re: Bug#401950: nexuiz: double free, memory errors

Date: Thu, 7 Dec 2006 23:45:48 +0100

hi!

in your supplied files i noticed, that you're using the open source
radeon driver for your graphics card. i'm sorry to tell you, but this
driver is known to be buggy for nexuiz.

if your graphics hardware is supported by ati's closed source driver
"fglrx", could you please try nexuiz with this driver and check if the
problems still exists?

i only have nvidia crads around driven by nvidia's closed source driver
and cannot reproduce the error - neither on i386 nor on amd64.

regards - fuddl


-- 
Among elephants it's not considered cool nor in any good taste
to drain other elephants

Message #20 received at 401950@bugs.debian.org (full text, mbox, reply):

From: Jiří Paleček <jpalecek@web.de>

To: "Bruno Kleinert" <fuddl@gmx.de>, 401950@bugs.debian.org

Subject: Re: Bug#401950: nexuiz: double free, memory errors

Date: Mon, 11 Dec 2006 00:05:03 +0100

Hi

On Thu, 07 Dec 2006 23:45:48 +0100, Bruno Kleinert <fuddl@gmx.de> wrote:

> hi!
>
> in your supplied files i noticed, that you're using the open source
> radeon driver for your graphics card. i'm sorry to tell you, but this
> driver is known to be buggy for nexuiz.
>
> if your graphics hardware is supported by ati's closed source driver

no, it isn't

> "fglrx", could you please try nexuiz with this driver and check if the
> problems still exists?
>
> i only have nvidia crads around driven by nvidia's closed source driver
> and cannot reproduce the error - neither on i386 nor on amd64.

I don't think it is related to graphics. The invalid free happens in
the very initializetion, then there are memcpy inside nexuiz that copy
to overlapping memory locations (should be memmove), the rest are
not errors.

Regards
    Jiri Palecek

Message #35 received at 401950-close@bugs.debian.org (full text, mbox, reply):

From: Sam Hocevar (Debian packages) <sam+deb@zoy.org>

To: 401950-close@bugs.debian.org

Subject: Bug#401950: fixed in libsdl1.2 1.2.11-8

Date: Fri, 09 Feb 2007 21:47:04 +0000

Source: libsdl1.2
Source-Version: 1.2.11-8

We believe that the bug you reported is fixed in the latest version of
libsdl1.2, which is due to be installed in the Debian FTP archive:

libsdl1.2-dev_1.2.11-8_i386.deb
  to pool/main/libs/libsdl1.2/libsdl1.2-dev_1.2.11-8_i386.deb
libsdl1.2_1.2.11-8.diff.gz
  to pool/main/libs/libsdl1.2/libsdl1.2_1.2.11-8.diff.gz
libsdl1.2_1.2.11-8.dsc
  to pool/main/libs/libsdl1.2/libsdl1.2_1.2.11-8.dsc
libsdl1.2debian-all_1.2.11-8_i386.deb
  to pool/main/libs/libsdl1.2/libsdl1.2debian-all_1.2.11-8_i386.deb
libsdl1.2debian-alsa_1.2.11-8_i386.deb
  to pool/main/libs/libsdl1.2/libsdl1.2debian-alsa_1.2.11-8_i386.deb
libsdl1.2debian-arts_1.2.11-8_i386.deb
  to pool/main/libs/libsdl1.2/libsdl1.2debian-arts_1.2.11-8_i386.deb
libsdl1.2debian-esd_1.2.11-8_i386.deb
  to pool/main/libs/libsdl1.2/libsdl1.2debian-esd_1.2.11-8_i386.deb
libsdl1.2debian-nas_1.2.11-8_i386.deb
  to pool/main/libs/libsdl1.2/libsdl1.2debian-nas_1.2.11-8_i386.deb
libsdl1.2debian-oss_1.2.11-8_i386.deb
  to pool/main/libs/libsdl1.2/libsdl1.2debian-oss_1.2.11-8_i386.deb
libsdl1.2debian-udeb_1.2.11-8_i386.udeb
  to pool/main/libs/libsdl1.2/libsdl1.2debian-udeb_1.2.11-8_i386.udeb
libsdl1.2debian_1.2.11-8_i386.deb
  to pool/main/libs/libsdl1.2/libsdl1.2debian_1.2.11-8_i386.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 401950@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Sam Hocevar (Debian packages) <sam+deb@zoy.org> (supplier of updated libsdl1.2 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Fri,  9 Feb 2007 16:09:04 +0100
Source: libsdl1.2
Binary: libsdl1.2debian-oss libsdl1.2debian-alsa libsdl1.2debian-arts libsdl1.2debian libsdl1.2-dev libsdl1.2debian-udeb libsdl1.2debian-nas libsdl1.2debian-esd libsdl1.2debian-all
Architecture: source i386
Version: 1.2.11-8
Distribution: unstable
Urgency: high
Maintainer: Debian SDL packages maintainers <pkg-sdl-maintainers@lists.alioth.debian.org>
Changed-By: Sam Hocevar (Debian packages) <sam+deb@zoy.org>
Description: 
 libsdl1.2-dev - Simple DirectMedia Layer development files
 libsdl1.2debian - Simple DirectMedia Layer
 libsdl1.2debian-all - Simple DirectMedia Layer (with all available options)
 libsdl1.2debian-alsa - Simple DirectMedia Layer (with X11 and ALSA options)
 libsdl1.2debian-arts - Simple DirectMedia Layer (with X11 and aRts options)
 libsdl1.2debian-esd - Simple DirectMedia Layer (with X11 and esound options)
 libsdl1.2debian-nas - Simple DirectMedia Layer (with X11 and NAS options)
 libsdl1.2debian-oss - Simple DirectMedia Layer (with X11 and OSS options)
 libsdl1.2debian-udeb - Simple DirectMedia Layer (with directfb graphics and no sound) (udeb)
Closes: 380508 401950 407870
Changes: 
 libsdl1.2 (1.2.11-8) unstable; urgency=high
 .
   * debian/control:
     + Do not build-depend on nonexistent libdirectfb-dev on hurd-i386, thanks
       to Samuel Thibault (Closes: #407870).
     + Added XS-Vcs-Svn field.
 .
   * debian/patches/218_double_free.diff:
     + Fix an invalid free() call, courtesy of Jiri Palecek (Closes: #380508,
       Closes: #401950).
Files: 
 72d0accdd6bf0cf830587ccfc2167c29 1575 libs optional libsdl1.2_1.2.11-8.dsc
 00be59304f18e48b368a4f5ea8e0e6d0 287989 libs optional libsdl1.2_1.2.11-8.diff.gz
 ece2361883f85122a6dbfdce5a057b43 20804 libs optional libsdl1.2debian_1.2.11-8_i386.deb
 e081091cff279a60a1fac65e7940ae57 218676 libs optional libsdl1.2debian-all_1.2.11-8_i386.deb
 5a3dd06a1e31cd108757534dc02f3afd 208796 libs extra libsdl1.2debian-alsa_1.2.11-8_i386.deb
 5eb4aba7c2a919da8efd94b899420633 209448 libs extra libsdl1.2debian-oss_1.2.11-8_i386.deb
 4245bdfe40e4732582813bc29e158774 207674 libs extra libsdl1.2debian-esd_1.2.11-8_i386.deb
 b4a60dd4586ddf2a99b77a992fd817fb 207618 libs extra libsdl1.2debian-arts_1.2.11-8_i386.deb
 bea1a998ab3267294ae79f7e046c4f1e 207854 libs extra libsdl1.2debian-nas_1.2.11-8_i386.deb
 60b6dbf2841f5c4a6e031d12d79b1260 117104 debian-installer extra libsdl1.2debian-udeb_1.2.11-8_i386.udeb
 ee021ee34248c8e36fc2cccbb886a9bb 842208 libdevel optional libsdl1.2-dev_1.2.11-8_i386.deb
Package-Type: udeb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFFzJdbfPP1rylJn2ERAsZVAJ4yRm09avF7QpPNpQ7Hx6twL/mbhgCfSSuG
fLgQqOiCeHM8VEExN7NB7/0=
=D581
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.