Subject: one user segfaulting other users' program - should this be possible?
To: None <netbsd-help@netbsd.org>
From: theo borm <theo_nbsdhelp@borm.org>
List: netbsd-help
Date: 05/29/2006 09:46:52
Hi,

I just encountered a problem with Perl/TK programs being segfaulted by 
other programs. Attached is a very simple example that will segfault 
when one uses specific "gimp" dialogs (also happens when gimp starts).

I /believe/ that the problem is /related/ to Perl/Tk and Tcl not wanting 
to be used together as described in this sourceforge post:
http://sourceforge.net/mailarchive/message.php?msg_id=11820453

Though I would be /very/ interested in a solution of just this problem 
(other than telling my users not to use the gimp), there is another 
problem that I'm much more concerned about: If user A starts the program 
below, then user B using gimp will segfault it.

What can be done about this? shouldn't (in general) one users' mischief 
be unable to affect another user?

Please correct me if I'm wrong (my view of things may be too simplistic, 
but I'm eager to learn...), but there seems to be a larger issue at 
stake: Apparently program X uses a library x with a name clash with a 
function in library y used by program Y. First program X is started by 
user A, working as expected, then malicious (or igorant) programmer B 
comes along, starting (his own) program Y, loading (his own) library y, 
which subsequently faithfully segfaults user A's program X. How 
exploitable would this be?

with kind regards,

Theo Borm



#!/usr/pkg/bin/perl
use Tk;
$mainwindow=MainWindow->new( -title => "Just a Button");
$mainwindow->Button( -text => 'Exit',
	-command => sub { exit(1); } )->pack;
MainLoop();