Ubuntu
shadow package

  1. Bug #130205
  2. Comment #2

Comment 2 for bug 130205

Revision history for this message
Kees Cook (kees) wrote :

Thanks for reporting this bug. This appears to be a NULL dereference, and does not seem exploitable. I have unmarked it security/private. Please feel free to report other bugs you may find.

$ ps auwwx | grep newgrp
root 23490 0.0 0.0 21900 1064 pts/13 S 14:09 0:00 newgrp testing
$ sudo gdb $(which newgrp) 23490
...
0x00002b81453ebb05 in waitpid () from /lib/libc.so.6
(gdb) cont
Continuing.
Program received signal SIGSEGV, Segmentation fault.
0x0000000000402903 in ?? ()
(gdb) info reg
rax 0x0 0
...
(gdb) x/5i $pc
0x402903 <_IO_putc@plt+3123>: mov (%rax),%r9