[gmail] Re: Segmentation Fault calling /sbin/syslogd

Marc Leeman marc.leeman at gmail.com
Wed Jan 24 01:33:33 PST 2007


On Wed, Jan 24, 2007 at 10:24:24AM +0100, Marc Leeman wrote:
> > > #ifdef __GLIBC__
> > > 
> > > by
> > > 
> > > #if definen(__GLIBC__) && !defined(__UCLIBC__)
> > > 
> > > Works now?
> 
> nope, still zombie.


[mleeman at moya ~]$ ssh root at 10.2.4.10
Warning: Permanently added '10.2.4.10' (RSA) to the list of known hosts.
root at 10.2.4.10's password:

PC: "The king is stupid!"
GM: "Stupid or not he's standing two feet behind you and there's nothing
wrong with his hearing."


        (random "flw" fortune cookie)


BusyBox v1.4.0 (2007-01-24 10:16:42 CET) Built-in shell (ash)
Enter 'help' for a list of built-in commands.

# /home/user/strace /sbin/syslogd -n -m 0 -C 16
execve("/sbin/syslogd", ["/sbin/syslogd", "-n", "-m", "0", "-C", "16"],
[/* 15 vars */]) mmap(NULL, 20, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) 0x30005000
stat("/etc/ld.so.cache", {st_mode=S_IFREG|0644, st_sized, ...}) open("/etc/ld.so.cache", O_RDONLY)      mmap(NULL, 64, PROT_READ, MAP_SHARED, 3, 0) close(3)                                open("/lib/libcrypt.so.0", O_RDONLY)    mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
read(3, "\177ELF\1\2\1\0\0\0\0\0\0\0\0\0\0\3\0\24\0\0\0\1\0\0\006"...,
4096) mmap(NULL, 147456, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) 0x30015000
mmap(0x30015000, 8692, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0)
mmap(0x30027000, 864, PROT_READ|PROT_WRITE|PROT_EXEC,
MAP_PRIVATE|MAP_FIXED, 3, 0x2000) mmap(0x30028000, 67812, PROT_READ|PROT_WRITE|PROT_EXEC,
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) close(3)                                munmap(0x30007000, 4096)                open("/lib/libgcc_s.so.1", O_RDONLY)    mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
read(3, "\177ELF\1\2\1\0\0\0\0\0\0\0\0\0\0\3\0\24\0\0\0\1\0\0\30"...,
4096) mmap(NULL, 118784, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) 0x30039000
mmap(0x30039000, 49180, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3,
0) mmap(0x30055000, 504, PROT_READ|PROT_WRITE|PROT_EXEC,
MAP_PRIVATE|MAP_FIXED, 3, 0xc000) close(3)                                munmap(0x30007000, 4096)                open("/lib/libc.so.0", O_RDONLY)        mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
read(3, "\177ELF\1\2\1\0\0\0\0\0\0\0\0\0\0\3\0\24\0\0\0\1\0\0\374"...,
4096) mmap(NULL, 413696, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) 0x30056000
mmap(0x30056000, 318184, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3,
0) mmap(0x300b3000, 7376, PROT_READ|PROT_WRITE|PROT_EXEC,
MAP_PRIVATE|MAP_FIXED, 3, 0x4d000) mmap(0x300b5000, 24440, PROT_READ|PROT_WRITE|PROT_EXEC,
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) close(3)                                munmap(0x30007000, 4096)                munmap(0x30006000, 64)                  ioctl(0, TCGETS, {B38400 opost isig icanon echo ...}) ioctl(1, TCGETS, {B38400 opost isig icanon echo ...}) stat("/etc/busybox.conf", {st_mode=S_IFREG|0644, st_size3, ...}) brk(0)                                  brk(0x10064000)                         open("/etc/busybox.conf", O_RDONLY)     ioctl(3, TCGETS, 0x7ff71a00)            for device)
brk(0x10065000)                         read(3, "[SUID]\nsu open("/etc/passwd", O_RDONLY)           ioctl(4, TCGETS, 0x7ff719c0)            for device)
brk(0x10066000)                         read(4, "root:QD/XXXiaSZiqY:0:0:root:/roo"..., 4096) close(4)                                open("/etc/passwd", O_RDONLY)           ioctl(4, TCGETS, 0x7ff719c0)            for device)
read(4, "root:QD/XXXiaSZiqY:0:0:root:/roo"..., 4096) close(4)                                read(3, "", 4096)                       close(3)                                getuid()                                getgid()                                setgid(0)                               setuid(0)                               exit(1)                                 Process 140 detached
# ls -al /bin/busybox
-rwsr-xr-x    1 0        0          314136 Jan 24  2007 /bin/busybox
# ps -ef
  PID  Uid     VmSize Stat Command
    1 root        348 S   init
    2 root            SWN [ksoftirqd/0]
    3 root            SW< [events/0]
    4 root            SW< [khelper]
    5 root            SW< [kthread]
    6 root            SW< [kblockd/0]
    7 root            SW  [pdflush]
    8 root            SW  [pdflush]
    9 root            SW< [kswapd0]
   10 root            SW< [aio/0]
   11 root            SW< [rpciod/0]
   49 user        180 S   /usr/sbin/httpd -h /home/httpd/ -u user
   53 root        456 S   -sh
   54 root        348 S   /sbin/klogd -n
   55 root        208 S   /usr/sbin/nwidentify -l -d
   56 root        376 S   /usr/sbin/server
   77 root        364 S   /usr/sbin/dropbear
  111 user        328 S   /usr/bin/tmdns -c /tmp/tmdns.conf
  131 root        604 R   /usr/sbin/dropbear
  132 root        456 S   -sh
  142 root        336 R   ps -ef

-- 
  greetz, marc
It's not Kansas, and you're way too homely to be Auntie Em, but... Come
here, Toto.
	Crichton - That Old Black Magic
scorpius.homelinux.org 2.6.19 #1 Tue Dec 5 16:35:02 CET 2006 GNU/Linux
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://busybox.net/lists/busybox/attachments/20070124/3400ce7b/attachment-0001.pgp 


More information about the busybox mailing list