Crash when using hardened_malloc

[Tommy Nguyen]

I am using texinfo-6.8-4.fc37.

Hardened malloc[1] is a security focused malloc implementation.
According to them, crashes are usually bugs in the application because
they are more strict than the glibc malloc. When running info -a arg,
this occurs:

fatal allocator error: canary corrupted

Here is the backtrace:

#0  __pthread_kill_implementation (threadid=<optimized out>,
signo=signo@entry=6, no_tid=no_tid@entry=0) at pthread_kill.c:44
        tid = <optimized out>
        ret = 0
        pd = <optimized out>
        old_mask = {__val = {18446744073709551615}}
        ret = <optimized out>
#1  0x00007f82c613bd33 in __pthread_kill_internal (signo=6,
threadid=<optimized out>) at pthread_kill.c:78
No locals.
#2  0x00007f82c60ebaa6 in __GI_raise (sig=sig@entry=6) at
../sysdeps/posix/raise.c:26
        ret = <optimized out>
#3  0x00007f82c60d57fc in __GI_abort () at abort.c:79
        save_stage = 1
        act = {__sigaction_handler = {sa_handler = 0x20, sa_sigaction =
0x20}, sa_mask = {__val = {604595996474640640, 4096, 127077651337664, 
              140722573246608, 126631950906736, 0, 126631950906752,
140722573246568, 140199646240899, 206158430240, 140722573246496,
140722573246304, 
              604595996474640640, 28831844882606436, 120,
519691045633}}, sa_flags = -970086215, sa_restorer = 0x739392445000}
#4  0x00007f82c62d667a in fatal_error () from /usr/lib64/libhardened-
malloc/libhardened_malloc-light.so
No symbol table info available.
#5  0x00007f82c62d6cac in deallocate_small () from
/usr/lib64/libhardened-malloc/libhardened_malloc-light.so
No symbol table info available.
#6  0x00005556fede5ea3 in dir_entry_of_infodir
(searchdir=0x732bcc737570 ".", label=0x732bcc737580 "systemd")
    at /usr/src/debug/texinfo-6.8-4.fc37.x86_64/info/dir.c:264
        dir_fullpath = 0x732bcc737590 "././dir.Y"
        len = <optimized out>
        dir_node = <optimized out>
        result = <optimized out>
        dummy = {st_dev = 42, st_ino = 1722328, st_nlink = 1, st_mode =
33188, st_uid = 1000, st_gid = 1000, __pad0 = 0, st_rdev = 0, st_size =
542, 
          st_blksize = 4096, st_blocks = 8, st_atim = {tv_sec =
1663490377, tv_nsec = 836610381}, st_mtim = {tv_sec = 1661729994, 
            tv_nsec = 41952742}, st_ctim = {tv_sec = 1663490377,
tv_nsec = 836610381}, __glibc_reserved = {0, 0, 0}}
        entry_fullpath = <optimized out>
        entry = <optimized out>
        dir_fullpath = <optimized out>
        len = <optimized out>
        result = <optimized out>
        dummy = <optimized out>
        entry_fullpath = <optimized out>
        dir_node = <optimized out>
        entry = <optimized out>
        tmp = <optimized out>
#7  info_find_matching_files (filename=0x732bcc737580 "systemd") at
/usr/src/debug/texinfo-6.8-4.fc37.x86_64/info/info.c:582
        new_ref = <optimized out>
        i = 4
        searchdir = 0x732bcc737570 "."
        man_node = <optimized out>
        i = <optimized out>
        searchdir = <optimized out>
        man_node = <optimized out>
        new_ref = <optimized out>
        p = <optimized out>
        j = <optimized out>
#8  main (argc=<optimized out>, argv=<optimized out>) at
/usr/src/debug/texinfo-6.8-4.fc37.x86_64/info/info.c:937
        getopt_long_index = -749136549
        init_file = 0x0
        error = 0x0

info does not seem to crash with normal usage otherwise. Let me know if
I can provide any additional information.

[1] https://github.com/GrapheneOS/hardened_malloc/

signature.asc
Description: This is a digitally signed message part