Dear Maintainer,

I rechecked the backtrace, and noticed the cause of crash is not an ABI
mismatch, but a nonstandard coded opcodestr "00340036003000300031",
which is the UTF16BE dump for L"46001", which means mcc = 460 and mnc = 1.

The current version of mmgui_module_gsm_operator_code in modules/mm07.c
cannot handle its length (and its code), and crashes for buffer overflow.

The title of the bug might have to be changed, sorry.

On Tue, 20 Oct 2015 09:56:25 +0800 Tianming Xie <persm...@gmail.com> wrote:
> Package: modem-manager-gui
> Version: 0.0.18-1
> Severity: normal
>
> Dear Maintainer,
>
> Recently, I bought a "Fibocom L810 LTE Module
> (http://www.fibocom.com/product/2-1-5-4.html)" modem in the form of a mini
> pci-e card, with usb id 1519:0443 and recognized as "Comneon Telit
LN930". It
> can be powered by the current version of modemmanager with the "Generic"
> plugin.
>
> But modem-manager-gui crashed when using this modem (it works fine with
> Huawei's internal modem module and detachable usb modem). I managed to
get the
> core and dump a backtrace, and noticed that the order of parameters
during the
> call of memcpy by mmgui_module_gsm_operator_code (between stack layer
#5 and
> #6) is reversed!
>
> #5 0x00007f846972b17a in memcpy (__len=17, __src=0x7f8464004223,
> __dest=0x7ffd28c7ef60) at /usr/include/x86_64-linux-gnu/bits/string3.h:51
> #6 mmgui_module_gsm_operator_code (opcodestr=0x7f8464004220
> "00340036003000300031") at mm07.c:287
>
> Finally, it goes to abort the execution.
>
> I will attached the complete backtrace and info about the modem
(generated with
> mmcli), may it be useful to you.
>
>
>
> -- System Information:
> Debian Release: stretch/sid
> APT prefers testing
> APT policy: (900, 'testing'), (500, 'testing-proposed-updates'), (500,
'unstable')
> Architecture: amd64 (x86_64)
>
> Kernel: Linux 4.2.0-1-amd64 (SMP w/4 CPU cores)
> Locale: LANG=zh_CN.UTF-8, LC_CTYPE=zh_CN.UTF-8 (charmap=UTF-8)
> Shell: /bin/sh linked to /bin/dash
> Init: systemd (via /run/systemd/system)
>
> Versions of packages modem-manager-gui depends on:
> ii libc6 2.19-22
> ii libcairo2 1.14.2-2
> ii libgdbm3 1.8.3-13.1
> ii libgdk-pixbuf2.0-0 2.32.1-1
> ii libglib2.0-0 2.46.0-2
> ii libgtk-3-0 3.18.2-1
> ii libgtkspell3-3-0 3.0.7-2
> ii modemmanager 1.4.12-1
> ii network-manager 1.0.6-1
> ii policykit-1 0.105-12
> ii ppp 2.4.6-3.1
>
> Versions of packages modem-manager-gui recommends:
> ii mobile-broadband-provider-info 20140317-1
> ii yelp 3.16.1-1
>
> Versions of packages modem-manager-gui suggests:
> ii evolution-data-server 3.18.0-3

Reply via email to