[Bug 2154651] [NEW] memory corruption in /usr/bin/env

[Ken McDonell]

Public bug reported:

This simple command:
$ valgrind /usr/bin/env date
shows a heap of Invalid read's in /usr/lib/cargo/bin/coreutils/env like

==9819== Invalid read of size 1
==9819==    at 0x532A166: strlen (vg_replace_strmem.c:506)
==9819==    by 0x41C323C: ??? (in /usr/lib/cargo/bin/coreutils/env)
==9819==    by 0x417E2C6: ??? (in /usr/lib/cargo/bin/coreutils/env)
==9819==    by 0x417E215: ??? (in /usr/lib/cargo/bin/coreutils/env)
==9819==    by 0x4318F5C: ??? (in /usr/lib/cargo/bin/coreutils/env)
==9819==    by 0x417E203: ??? (in /usr/lib/cargo/bin/coreutils/env)
==9819==    by 0x54FE600: (below main) (libc_start_call_main.h:59)
==9819==  Address 0x7ffdc57a3fcd is not stack'd, malloc'd or (recently) free'd

This is triggering QA failures in a much larger context, namely the
autoumated QA for PCP (www.pcp.io) but this simple example demonstrates
the problem.

The test case passes on Ubuntu 24.04 and even the binary from 24.04
copied to 26.04 works, so this is definitely a 26.04 regression.

ProblemType: Bug
DistroRelease: Ubuntu 26.04
Package: coreutils-from-uutils 0.0.0~ubuntu25
ProcVersionSignature: Ubuntu 7.0.0-22.22-generic 7.0.0
Uname: Linux 7.0.0-22-generic x86_64
NonfreeKernelModules: zfs
ApportVersion: 2.34.0-0ubuntu2
Architecture: amd64
CasperMD5CheckResult: pass
CurrentDesktop: ubuntu:GNOME
Date: Sun May 31 08:41:56 2026
InstallationDate: Installed on 2024-05-14 (746 days ago)
InstallationMedia: Ubuntu-Server 24.04 LTS "Noble Numbat" - Release amd64 (20240423)
PackageArchitecture: all
SourcePackage: coreutils-from
UpgradeStatus: Upgraded to resolute on 2026-05-27 (3 days ago)

** Affects: coreutils-from (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: amd64 apport-bug resolute wayland-session

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to coreutils-from in Ubuntu.
https://bugs.launchpad.net/bugs/2154651

Title:
  memory corruption in /usr/bin/env

Status in coreutils-from package in Ubuntu:
  New

Bug description:
  This simple command:
  $ valgrind /usr/bin/env date
  shows a heap of Invalid read's in /usr/lib/cargo/bin/coreutils/env like

  ==9819== Invalid read of size 1
  ==9819==    at 0x532A166: strlen (vg_replace_strmem.c:506)
  ==9819==    by 0x41C323C: ??? (in /usr/lib/cargo/bin/coreutils/env)
  ==9819==    by 0x417E2C6: ??? (in /usr/lib/cargo/bin/coreutils/env)
  ==9819==    by 0x417E215: ??? (in /usr/lib/cargo/bin/coreutils/env)
  ==9819==    by 0x4318F5C: ??? (in /usr/lib/cargo/bin/coreutils/env)
  ==9819==    by 0x417E203: ??? (in /usr/lib/cargo/bin/coreutils/env)
  ==9819==    by 0x54FE600: (below main) (libc_start_call_main.h:59)
  ==9819==  Address 0x7ffdc57a3fcd is not stack'd, malloc'd or (recently) free'd

  This is triggering QA failures in a much larger context, namely the
  autoumated QA for PCP (www.pcp.io) but this simple example
  demonstrates the problem.

  The test case passes on Ubuntu 24.04 and even the binary from 24.04
  copied to 26.04 works, so this is definitely a 26.04 regression.

  ProblemType: Bug
  DistroRelease: Ubuntu 26.04
  Package: coreutils-from-uutils 0.0.0~ubuntu25
  ProcVersionSignature: Ubuntu 7.0.0-22.22-generic 7.0.0
  Uname: Linux 7.0.0-22-generic x86_64
  NonfreeKernelModules: zfs
  ApportVersion: 2.34.0-0ubuntu2
  Architecture: amd64
  CasperMD5CheckResult: pass
  CurrentDesktop: ubuntu:GNOME
  Date: Sun May 31 08:41:56 2026
  InstallationDate: Installed on 2024-05-14 (746 days ago)
  InstallationMedia: Ubuntu-Server 24.04 LTS "Noble Numbat" - Release amd64 (20240423)
  PackageArchitecture: all
  SourcePackage: coreutils-from
  UpgradeStatus: Upgraded to resolute on 2026-05-27 (3 days ago)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/coreutils-from/+bug/2154651/+subscriptions