make webfrontend more robust #337
Comments
|
The bug have nothing to do with the webserver or debugger. The crash happens when yanking negative length of bytes. 'y -1' . I will fix that bug later when i have time to use the laptop. Also. The -e flag is wrongly used. "Public http servwr true" is nothing parseable by rconfig.. The flag you need is: -e http.public=true Thanks for reporting. I will release today, and we will hopefully not find much more crashes like that :)
|
|
ok, Thanks for clarifying. Sadly here is a related 'Thing' to 'y -1': $ r2 /bin/sh Waiting for release now :) |
|
actually the 2nd 'Thing' seems to occur after each two invocation, see: [0x00418390]> y - |
how to reproduce
r2 -e 'public http server true' -c=H -d /bin/sh
goto convert/code
Enter -1
Block size -1 is too big
Segmentation fault
dump
gdb
which r2GNU gdb (GDB) 7.6.1
Copyright (C) 2013 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later http://gnu.org/licenses/gpl.html
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-unknown-linux-gnu".
For bug reporting instructions, please see:
http://www.gnu.org/software/gdb/bugs/...
Reading symbols from /usr/local/bin/radare2...done.
(gdb) b main
Breakpoint 1 at 0x402b83: file radare2.c, line 159.
(gdb) r -e 'public http server true' -c=H -d /bin/sh
Starting program: /usr/local/bin/r2 -e 'public http server true' -c=H -d /bin/sh
warning: no loadable sections found in added symbol-file system-supplied DSO at 0x7ffff7ffa000
warning: Could not load shared library symbols for linux-vdso.so.1.
Do you need "set solib-search-path" or "set sysroot"?
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/usr/lib/libthread_db.so.1".
Breakpoint 1, main (argc=6, argv=0x7fffffffeb38) at radare2.c:159
warning: Source file is more recent than executable.
159 RThreadLock *lock = NULL;
(gdb) s
160 RThread *rabin_th = NULL;
(gdb) c
Continuing.
r_config_get: variable 'public http server true' not found
Process with PID 4904 started...
PID = 4904
r_config_get: variable 'public http server true' not found
r_debug_select: 4904 4904
r_config_get: variable 'public http server true' not found
Starting http server...
http://localhost:9090/
START /usr/lib/firefox/firefox "http://localhost:9090/"
program received signal SIGSEGV, Segmentation fault.
0x00007ffff3d59bee in __memcpy_sse2_unaligned () from /usr/lib/libc.so.6
(gdb) bt full
#0 0x00007ffff3d59bee in __memcpy_sse2_unaligned () from /usr/lib/libc.so.6
No symbol table info available.
#1 0x00007ffff7ba7260 in r_core_yank (core=0x606900 , addr=140737351901808, len=-1) at yank.c:30
#2 0x00007ffff7b98e0a in cmd_yank (data=0x606900 , input=0x197bb11 " -1") at cmd.c:223
#3 0x00007ffff5f9aeb7 in r_cmd_call (cmd=0x68cb30, input=0x197bb10 "y -1") at cmd.c:166
#4 0x00007ffff7b9be14 in r_core_cmd_subst_i (core=0x606900 , cmd=0x197bb10 "y -1") at cmd.c:1214
#5 0x00007ffff7b9a73b in r_core_cmd_subst (core=0x606900 , cmd=0x197bb10 "y -1") at cmd.c:798
#6 0x00007ffff7b9cdc5 in r_core_cmd_str_pipe (core=0x606900 , cmd=0x1979265 "y -1") at cmd.c:1522
#7 0x00007ffff7bae5a1 in r_core_rtr_http (core=0x606900 , launch=1, path=0x191f9b2 "") at rtr.c:189
\300\337\377\377\377\177\000\000\325\016D
224\000\000\000\000\220̶\367\377\177\000"
rs = 0x197bad0
iport = 0
oldsandbox = -1
timeout = 3
x = 0
y = 1
z = 1
u = 1
v = 0
port = 0x6bfa80 "9090"
allow = 0x6bf600 ""
#8 0x00007ffff7b98cc4 in cmd_rap (data=0x606900 , input=0x191f9b1 "H") at cmd.c:204
#9 0x00007ffff5f9aeb7 in r_cmd_call (cmd=0x68cb30, input=0x191f9b0 "=H") at cmd.c:166
#10 0x00007ffff7b9be14 in r_core_cmd_subst_i (core=0x606900 , cmd=0x191f9b0 "=H") at cmd.c:1214
#11 0x00007ffff7b9a73b in r_core_cmd_subst (core=0x606900 , cmd=0x191f9b0 "=H") at cmd.c:798
---Type to continue, or q to quit---
#12 0x00007ffff7b9c77c in r_core_cmd (core=0x606900 , cstr=0x7fffffffedb3 "=H", log=0) at cmd.c:1383
#13 0x00007ffff7b9cce3 in r_core_cmd0 (user=0x606900 , cmd=0x7fffffffedb3 "=H") at cmd.c:1503
No locals.
#14 0x000000000040440a in main (argc=6, argv=0x7fffffffeb38) at radare2.c:550
(gdb) bt
#0 0x00007ffff3d59bee in __memcpy_sse2_unaligned () from /usr/lib/libc.so.6
#1 0x00007ffff7ba7260 in r_core_yank (core=0x606900 , addr=140737351901808, len=-1) at yank.c:30
#2 0x00007ffff7b98e0a in cmd_yank (data=0x606900 , input=0x197bb11 " -1") at cmd.c:223
#3 0x00007ffff5f9aeb7 in r_cmd_call (cmd=0x68cb30, input=0x197bb10 "y -1") at cmd.c:166
#4 0x00007ffff7b9be14 in r_core_cmd_subst_i (core=0x606900 , cmd=0x197bb10 "y -1") at cmd.c:1214
#5 0x00007ffff7b9a73b in r_core_cmd_subst (core=0x606900 , cmd=0x197bb10 "y -1") at cmd.c:798
#6 0x00007ffff7b9cdc5 in r_core_cmd_str_pipe (core=0x606900 , cmd=0x1979265 "y -1") at cmd.c:1522
#7 0x00007ffff7bae5a1 in r_core_rtr_http (core=0x606900 , launch=1, path=0x191f9b2 "") at rtr.c:189
#8 0x00007ffff7b98cc4 in cmd_rap (data=0x606900 , input=0x191f9b1 "H") at cmd.c:204
#9 0x00007ffff5f9aeb7 in r_cmd_call (cmd=0x68cb30, input=0x191f9b0 "=H") at cmd.c:166
#10 0x00007ffff7b9be14 in r_core_cmd_subst_i (core=0x606900 , cmd=0x191f9b0 "=H") at cmd.c:1214
#11 0x00007ffff7b9a73b in r_core_cmd_subst (core=0x606900 , cmd=0x191f9b0 "=H") at cmd.c:798
#12 0x00007ffff7b9c77c in r_core_cmd (core=0x606900 , cstr=0x7fffffffedb3 "=H", log=0) at cmd.c:1383
#13 0x00007ffff7b9cce3 in r_core_cmd0 (user=0x606900 , cmd=0x7fffffffedb3 "=H") at cmd.c:1503
#14 0x000000000040440a in main (argc=6, argv=0x7fffffffeb38) at radare2.c:550
(gdb) i f
Stack level 0, frame at 0x7fffffffd8a0:
rip = 0x7ffff3d59bee in __memcpy_sse2_unaligned; saved rip 0x7ffff7ba7260
called by frame at 0x7fffffffd8e0
Arglist at 0x7fffffffd890, args:
Locals at 0x7fffffffd890, Previous frame's sp is 0x7fffffffd8a0
Saved registers:
rip at 0x7fffffffd898
(gdb) i r
rax 0xfffffffffffffff0 -16
rbx 0x19791d0 26710480
rcx 0x0 0
rdx 0xffffffffffffffff -1
rsi 0x1981ee0 26746592
rdi 0x0 0
rbp 0x7fffffffd8d0 0x7fffffffd8d0
rsp 0x7fffffffd898 0x7fffffffd898
r8 0x1 1
r9 0xfffffffffffffff 1152921504606846975
r10 0x7fffffffd660 140737488344672
r11 0x7ffff3d59a70 140737284250224
r12 0x4026a0 4204192
r13 0x7fffffffeb30 140737488350000
r14 0x0 0
r15 0x0 0
rip 0x7ffff3d59bee 0x7ffff3d59bee <__memcpy_sse2_unaligned+382>
eflags 0x10202 [ IF RF ]
cs 0x33 51
ss 0x2b 43
ds 0x0 0
es 0x0 0
fs 0x0 0
gs 0x0 0
(gdb) !r2 -v
radare2 0.9.5git @ linux-little-x86-64 git.0.9.4-584-g3b95036
commit: 3b95036 build: 2013-11-06
The text was updated successfully, but these errors were encountered: