View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0000406 | file | General | public | 2022-11-27 18:00 | 2022-12-02 17:38 |
| Reporter | rwmjones | Assigned To | christos | ||
| Priority | normal | Severity | crash | Reproducibility | always |
| Status | resolved | Resolution | won't fix | ||
| Product Version | 5.42 | ||||
| Summary | 0000406: seccomp support causes the -z option to fail on zstd-compressed files | ||||
| Description | "file" is been compiled with seccomp support. When we ask to inspect a zstd-compressed file with the -z option, it crashes: $ ./file-5.42/src/.libs/file -z /var/tmp/lib-i586.so.zst /var/tmp/lib-i586.so.zst: Bad system call | ||||
| Steps To Reproduce | Please see attached zstd file. Just run the above command on it. | ||||
| Tags | No tags attached. | ||||
|
|
|
|
|
This issue was originally reported by Toolybird here: https://github.com/libguestfs/libguestfs/issues/100#issuecomment-1328182986 |
|
|
Bad system call is possibly pipe2 ...? pipe2(0x7fff7c648048, O_CLOEXEC) = 293 +++ killed by SIGSYS +++ Bad system call (core dumped) |
|
|
I've read about the -S option which the manual suggests combining with -z. Nevertheless it is possible to get it to work by enabling the following syscalls (quite a broad set): clone3 execve pipe2 prlimit64 wait4 I wonder if they could only be enabled when we know we're going to need to run a subcommand. |
|
|
If you enable clone and execve might as well turn off the sandbox. 5.43 gives you a better error message than bad system call. Fix the distribution provider to include the proper libraries instead. |
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2022-11-27 18:00 | rwmjones | New Issue | |
| 2022-11-27 18:00 | rwmjones | File Added: lib-i586.so.zst | |
| 2022-11-27 18:00 | rwmjones | Note Added: 0003863 | |
| 2022-11-27 18:03 | rwmjones | Note Added: 0003864 | |
| 2022-11-28 10:19 | rwmjones | Note Added: 0003865 | |
| 2022-12-02 17:37 | christos | Assigned To | => christos |
| 2022-12-02 17:37 | christos | Status | new => assigned |
| 2022-12-02 17:38 | christos | Status | assigned => resolved |
| 2022-12-02 17:38 | christos | Resolution | open => won't fix |
| 2022-12-02 17:38 | christos | Note Added: 0003868 |
