ipmitool aborts due to buffer overflow.
Issue
- ipmitool aborts and dumps core when performing the follwing command.:
Core was generated by `/usr/bin/ipmitool -v -I lanplus -H 10.10.10.10 -U xxxxx -P XXXXXXXX sdr elist'.
Program terminated with signal 6, Aborted.
#0 0x00000000010d6625 in raise () from /lib64/libc.so.6
Missing separate debuginfos, use: debuginfo-install glibc-2.12-1.149.el6_6.9.x86_64
(gdb) bt
#0 0x00000000010d6625 in raise () from /lib64/libc.so.6
#1 0x00000000010d7e05 in abort () from /lib64/libc.so.6
#2 0x0000000001114537 in __libc_message () from /lib64/libc.so.6
#3 0x00000000011a6527 in __fortify_fail () from /lib64/libc.so.6
#4 0x00000000011a4410 in __chk_fail () from /lib64/libc.so.6
#5 0x00000000011a3b0b in __vsnprintf_chk () from /lib64/libc.so.6
#6 0x00000000011a39da in __snprintf_chk () from /lib64/libc.so.6
#7 0x000000000040b56b in snprintf (intf=0x69e8a0, sensor=0x1bc9700) at /usr/include/bits/stdio2.h:65
#8 ipmi_sdr_print_sensor_full (intf=0x69e8a0, sensor=0x1bc9700) at ipmi_sdr.c:1145
#9 0x000000000040d11a in ipmi_sdr_print_rawentry (intf=<value optimized out>, type=<value optimized out>,
raw=<value optimized out>, len=<value optimized out>) at ipmi_sdr.c:2303
#10 0x000000000040d3a0 in ipmi_sdr_print_sdr (intf=0x69e8a0, type=1 '\001') at ipmi_sdr.c:2509
#11 0x000000000040d935 in ipmi_sdr_main (intf=0x69e8a0, argc=2, argv=0x7fff18e6d260) at ipmi_sdr.c:4345
#12 0x0000000000436395 in ipmi_main (argc=<value optimized out>, argv=<value optimized out>, cmdlist=0x68c1e0,
intflist=0x0) at ipmi_main.c:706
#13 0x00000000004048a0 in main (argc=<value optimized out>, argv=<value optimized out>) at ipmitool.c:126
Environment
- Red Hat Enterprise Linux 6
- ipmitool-1.8.11-16.el6
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.
Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.
