FreeBSD Security Advisory FreeBSD-SA-15:25.ntp

[Derek Schrock]

On Mon, Oct 26, 2015 at 04:46:42PM EDT, Gary Palmer wrote:
> 
> 
> Here's my backtrace from 9.3 ntpq on amd64
> 
> % gdb /usr/obj/usr/src/usr.sbin/ntp/ntpq/ntpq ntpq.core 
> GNU gdb 6.1.1 [FreeBSD]
> Copyright 2004 Free Software Foundation, Inc.
> GDB is free software, covered by the GNU General Public License, and you are
> welcome to change it and/or distribute copies of it under certain conditions.
> Type "show copying" to see the conditions.
> There is absolutely no warranty for GDB.  Type "show warranty" for details.
> This GDB was configured as "amd64-marcel-freebsd"...(no debugging symbols found)...
> Core was generated by `ntpq'.
> Program terminated with signal 6, Aborted.
> Reading symbols from /lib/libedit.so.7...(no debugging symbols found)...done.
> Loaded symbols for /lib/libedit.so.7
> Reading symbols from /lib/libm.so.5...(no debugging symbols found)...done.
> Loaded symbols for /lib/libm.so.5
> Reading symbols from /lib/libcrypto.so.6...(no debugging symbols found)...done.
> Loaded symbols for /lib/libcrypto.so.6
> Reading symbols from /lib/libc.so.7...(no debugging symbols found)...done.
> Loaded symbols for /lib/libc.so.7
> Reading symbols from /lib/libncurses.so.8...(no debugging symbols found)...done.
> Loaded symbols for /lib/libncurses.so.8
> Reading symbols from /libexec/ld-elf.so.1...(no debugging symbols found)...done.
> Loaded symbols for /libexec/ld-elf.so.1
> #0  0x0000000801147f1c in kill () from /lib/libc.so.7
> (gdb) bt
> #0  0x0000000801147f1c in kill () from /lib/libc.so.7
> #1  0x0000000801146b4b in abort () from /lib/libc.so.7
> #2  0x0000000000418ad7 in isc_error_fatal ()
> #3  0x0000000000418b2f in isc_error_runtimecheck ()
> #4  0x0000000000413039 in isc_net_probeipv4 ()
> #5  0x0000000000411e43 in init_lib ()
> #6  0x000000000040767b in ntpqmain ()
> #7  0x0000000000403a61 in _start ()
> #8  0x0000000800658000 in ?? ()
> #9  0x0000000000000000 in ?? ()
> (gdb) 
> 
> ntpd is starting OK on the same box, but I have to use a pre-update
> copy of ntpq to make sure it's synchronised OK.  For some reason,
> a pre-update copy of ntpdc doesn't work, just times out.

FYI:

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=204046