[LU-7919] Buffer overflow in mount_lustre: parse_ldd(),append_option()

• Type: Bug
• Resolution: Fixed
• Priority: Major
• Fix Version/s: Lustre 2.9.0
• Affects Version/s: Lustre 2.8.0
• Labels: mount
• Severity: 3
• Assignee: WC Triage
• Reporter: Lokesh Nagappa Jaliminche (Inactive)

Description

buffer overflow in mount_lustre: parse_ldd(),append_option()

Reproduction Steps:
================
[root@dev-1 tests]# sh llmount.sh
[root@dev-1 tests]# rm -f /tmp/A2000; for x in $(seq 1 4000); do echo -n A >> /tmp/A2000 ; done
[root@dev-1 tests]# umount /mnt/mds1
[root@dev-1 tests]# losetup /dev/loop0 /tmp/lustre-mdt1
[root@dev-1 tests]# mount -t lustre /dev/loop0 /mnt/mds1 -o option4kplus=$(cat /tmp/A2000 )

failure logs:
=========

[root@dev-1 tests]# mount -t lustre /dev/loop0 /mnt/mds1 -o option4kplus=$(cat /tmp/A2000 )
mount.lustre: mount /dev/loop0 at /mnt/mds1 failed: Invalid argument
This may have multiple causes.
Are the mount options correct?
Check the syslog for more info.
*** glibc detected *** /sbin/mount.lustre: free(): invalid next size (normal): 0x000000000234f050 ***
======= Backtrace: =========
/lib64/libc.so.6[0x3bbc075e66]
/lib64/libc.so.6[0x3bbc0789b3]
/sbin/mount.lustre(main+0x411)[0x402f11]
/lib64/libc.so.6(__libc_start_main+0xfd)[0x3bbc01ed5d]
/sbin/mount.lustre[0x4024a9]

Issue Links

• is related to: LU-7965 mkfs.lustre sometimes fails with a segmentation fault
• is related to: LU-11785 conf-sanity test_98 fails with 'Buffer overflow check failed'