Project

General

Profile

Actions
Copy link

action #154105

closed

[security][maintenance][15-SPx][s390x] test fails in dbus_fuzzer: unexpected dfuzzer exit status for org.freedesktop.PolicyKit1

Added by FSzekely 3 months ago. Updated 3 months ago.

Status:
Resolved
Priority:
Normal
Assignee:
pstivanin
Category:
Bugs in existing tests
Target version:
-
Start date:
2024-01-23
Due date:
% Done:

100%

Estimated time:
4.00 h
Difficulty:
Tags:
fail

Description

Observation

The following fuzzing: 

./dfuzzer -v -n org.freedesktop.PolicyKit1

returns 

Exit Status: 3

which is not handled in any special way by the test.

This makes the test fail. Not sure if we can handle this case as "Exit status: 1". Hence opening this ticket.

openQA test in scenario sle-15-SP5-Server-DVD-Updates-s390x-cc_atsec@s390x-kvm fails in
dbus_fuzzer

Reproducible

Fails since (at least) Build 20240122-1

Expected result

Last good: 20240121-1 (or more recent)

Further details

Always latest result in this scenario: latest

Actions
Copy link
 #1

Updated by pstivanin 3 months ago

  • Subject changed from [security][15-SP5][s390x] test fails in dbus_fuzzer: unexpected dfuzzer exit status for org.freedesktop.PolicyKit1 to [security][maintenance][15-SPx][s390x] test fails in dbus_fuzzer: unexpected dfuzzer exit status for org.freedesktop.PolicyKit1
Actions
Copy link
 #2

Updated by pstivanin 3 months ago

Happening also on 15-SP3 and 15-SP4

Actions
Copy link
 #3

Updated by pstivanin 3 months ago

  • Status changed from New to In Progress
  • Assignee set to pstivanin
  • Estimated time set to 4.00 h
Actions
Copy link
 #5

Updated by pstivanin 3 months ago

  • % Done changed from 0 to 30

about dbus_service_exposure these are the unknown ids:

15-SP3:

:1.27                      3900 snapperd        root :1.27         snapperd.service         -       -          
:1.28                      4789 busctl          root :1.28         session-3.scope          3       -

15-SP4+

:1.34                      4042 snapperd        root    :1.34         snapperd.service         -       -
:1.35                      4743 busctl          root    :1.35         session-3.scope          3       -
Actions
Copy link
 #6

Updated by pstivanin 3 months ago

  • % Done changed from 30 to 50

The exit code 3 is returned when there's a memory leak. From the log:

Suppressions from './dfuzzer.conf'

[SESSION BUS]
Error: Could not get PID of name 'org.freedesktop.PolicyKit1': no such name.

[SYSTEM  BUS]

[PROCESS: /usr/lib/polkit-1/polkitd

[PACKAGE: polkit-121-150500.1.6.s390x

[CONNECTED TO PID: 4211
Object: /
Object: /org
Object: /org/freedesktop
Object: /org/freedesktop/PolicyKit1
Object: /org/freedesktop/PolicyKit1/Authority
 Interface: org.freedesktop.DBus.Properties
  Get...
  PASS Get
  GetAll...
  PASS GetAll
  Set...
  PASS Set
 Interface: org.freedesktop.DBus.Introspectable

  SKIP Introspect - void method
 Interface: org.freedesktop.DBus.Peer

  SKIP Ping - void method

  SKIP GetMachineId - void method
 Interface: org.freedesktop.PolicyKit1.Authority
  EnumerateActions...
  WARN EnumerateActions - memory usage 3.0x more than initial memory
   (9880 -> 29784 [kB])
  CheckAuthorization...
  SKIP CheckAuthorization - advanced signatures not yet implemented
  CancelCheckAuthorization...
  PASS CancelCheckAuthorization
  RegisterAuthenticationAgent...
  SKIP RegisterAuthenticationAgent - advanced signatures not yet implemented
  RegisterAuthenticationAgentWithOptions...
  SKIP RegisterAuthenticationAgentWithOptions - advanced signatures not yet implemented
  UnregisterAuthenticationAgent...
  SKIP UnregisterAuthenticationAgent - advanced signatures not yet implemented
  AuthenticationAgentResponse...
  SKIP AuthenticationAgentResponse - advanced signatures not yet implemented
  AuthenticationAgentResponse2...
  SKIP AuthenticationAgentResponse2 - advanced signatures not yet implemented
  EnumerateTemporaryAuthorizations...
  SKIP EnumerateTemporaryAuthorizations - advanced signatures not yet implemented
  RevokeTemporaryAuthorizations...
  SKIP RevokeTemporaryAuthorizations - advanced signatures not yet implemented
  RevokeTemporaryAuthorizationById...
  PASS RevokeTemporaryAuthorizationById
Exit status: 3

we can see:

  WARN EnumerateActions - memory usage 3.0x more than initial memory
   (9880 -> 29784 [kB])

therefore the variable leaking_mem_flg is set to 1 here https://gitlab.suse.de/qe-security/atsec/-/blob/main/pentest/dfuzzer-master/src/fuzz.c?ref_type=heads#L688 causing dfuzz_test_method to return 3 here https://gitlab.suse.de/qe-security/atsec/-/blob/main/pentest/dfuzzer-master/src/fuzz.c?ref_type=heads#L730

Actions
Copy link
 #8

Updated by pstivanin 3 months ago

  • Status changed from In Progress to Resolved
Actions
Copy link

Also available in: Atom PDF