#24339: (Sandbox) Caught a bad syscall attempt (syscall mprotect)
------------------------------+--------------------------------
Reporter: dgoulet | Owner: (none)
Type: defect | Status: new
Priority: Medium | Milestone: Tor: 0.3.2.x-final
Component: Core Tor/Tor | Version:
Severity: Normal | Keywords: sandbox
Actual Points: | Parent ID:
Points: | Reviewer:
Sponsor: |
------------------------------+--------------------------------
Trace is:
{{{
/usr/lib/x86_64-linux-gnu/libasan.so.4(+0x558c0)[0x7f6e71f908c0]
/lib/x86_64-linux-gnu/libc.so.6(mprotect+0x7)[0x7f6e6fa6ccf7]
/lib/x86_64-linux-gnu/libpthread.so.0(+0x13150)[0x7f6e70a72150]
/lib/x86_64-linux-gnu/libc.so.6(mprotect+0x7)[0x7f6e6fa6ccf7]
/lib/x86_64-linux-
gnu/libpthread.so.0(pthread_create+0x89b)[0x7f6e70a6737b]
/usr/lib/x86_64-linux-
gnu/libasan.so.4(pthread_create+0xf9)[0x7f6e71f72db9]
git/tor/src/or/tor(spawn_func+0x117)[0x55673b5a52c7]
git/tor/src/or/tor(threadpool_new+0x539)[0x55673b5a3499]
git/tor/src/or/tor(cpu_init+0xb7)[0x55673b485917]
git/tor/src/or/tor(do_main_loop+0x7fa)[0x55673b1a047a]
git/tor/src/or/tor(tor_main+0x143d)[0x55673b1a579d]
git/tor/src/or/tor(main+0x1c)[0x55673b1922bc]
/lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf1)[0x7f6e6f97f1c1]
git/tor/src/or/tor(_start+0x2a)[0x55673b1940ba]
}}}
strace shows me:
{{{
20085 mprotect(0x7f6e6b9bf000, 8388608, PROT_READ|PROT_WRITE) = 10
20085 --- SIGSYS {si_signo=SIGSYS, si_code=SYS_SECCOMP,
si_call_addr=0x7f6e6fa6ccf7, si_syscall=__NR_mprotect,
si_arch=AUDIT_ARCH_X86_64} ---
}}}
Basically, our sandbox doesn't allow `PROT_WRITE`. Libc is 2.26.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/24339>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________ tor-bugs mailing list tor-bugs@xxxxxxxxxxxxxxxxxxxx https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs