protonscr

Buffer overflow detected in fontconfig and DaiBannaSIL-Bold.ttf

steamclosed Distro Family: Arch
ValveSoftware/steam-for-linux#12148 · opened 2025-06-29 by lolpowerluke · updated 2025-06-30 · 8 comments · github
Llolpowerluke 2025-06-29 github

Your system information

  • Steam client version (build number or date): 1.0.0.82-2
  • Distribution (e.g. Ubuntu): Arch linux
  • Opted into Steam client beta?: No
  • Have you checked for system updates?: Yes (everything is up to date)
  • Steam Logs: steam-logs.tar.gz
  • GPU: Nvidia (RTX 3060 12G)

Please describe your issue in as much detail as possible:

Expected: steam launches like normal
What happened: steam doesnt launch and dumps core
~/.local/share/Steam/steam.sh: line 960: 4236 Aborted (core dumped) "$STEAMROOT/$STEAMEXEPATH" "$@"

Steps for reproducing this issue:

  1. type steam in terminal
  2. wait ~2secs
  3. see error line

If I need to provide more info, please lmk

Llolpowerluke 2025-06-29 github

full command looks like this

[lolpowerluke@archlinux ~]$ steam
steam.sh[4133]: Running Steam on arch rolling 64-bit
steam.sh[4133]: STEAM_RUNTIME is enabled automatically
setup.sh[4185]: Steam runtime environment up-to-date!
steam.sh[4133]: Log already open
steam.sh[4133]: Using supervisor /home/lolpowerluke/.local/share/Steam/ubuntu12_32/steam-runtime/amd64/usr/bin/steam-runtime-supervisor
steam.sh[4133]: Steam client's requirements are satisfied
CProcessEnvironmentManager is ready, 6 preallocated environment variables.
[2025-06-29 09:56:19] Startup - updater built May 19 2025 19:50:58
[2025-06-29 09:56:19] Startup - Steam Client launched with: '/home/lolpowerluke/.local/share/Steam/ubuntu12_32/steam' '-srt-logger-opened'
Looks like steam didn't shutdown cleanly, scheduling immediate update check
CProcessEnvironmentManager is ready, 6 preallocated environment variables.
[2025-06-29 09:56:19] Loading cached metrics from disk (/home/lolpowerluke/.local/share/Steam/package/steam_client_metrics.bin)
[2025-06-29 09:56:19] Using the following download hosts for Public, Realm steamglobal
[2025-06-29 09:56:19] 1. https://client-update.fastly.steamstatic.com, /, Realm 'steamglobal', weight was 900, source = 'update_hosts_cached.vdf'
[2025-06-29 09:56:19] 2. https://client-update.akamai.steamstatic.com, /, Realm 'steamglobal', weight was 100, source = 'update_hosts_cached.vdf'
[2025-06-29 09:56:19] 3. https://client-update.steamstatic.com, /, Realm 'steamglobal', weight was 1, source = 'baked in'
06/29 09:56:19 minidumps folder is set to /tmp/dumps
[2025-06-29 09:56:19] Checking for update on startup
[2025-06-29 09:56:19] Checking for available updates...
[2025-06-29 09:56:19] Downloading manifest: https://client-update.fastly.steamstatic.com/steam_client_ubuntu12
[2025-06-29 09:56:19] Manifest download: send request
[2025-06-29 09:56:19] Process started with command-line: '/home/lolpowerluke/.local/share/Steam/ubuntu12_32/steam' '-child-update-ui' '-child-update-ui-socket' '8' '-srt-logger-opened'
06/29 09:56:19 minidumps folder is set to /tmp/dumps
[2025-06-29 09:56:19] Using update UI: xwin
06/29 09:56:19 Init: Installing breakpad exception handler for appid(steam)/version(0)/tid(4237)
[2025-06-29 09:56:19] Create window
[2025-06-29 09:56:19] Set percent complete: 0
[2025-06-29 09:56:19] Set status message: Checking for available updates...
[2025-06-29 09:56:19] Set percent complete: -1
[2025-06-29 09:56:19] Manifest download: waiting for download to finish
[2025-06-29 09:56:19] Manifest download: finished
[2025-06-29 09:56:19] Download skipped: /steam_client_ubuntu12 version 1747701111, installed version 1747701111, existing pending version 0
[2025-06-29 09:56:19] Nothing to do
[2025-06-29 09:56:19] Verifying installation...
[2025-06-29 09:56:19] Verifying all executable checksums
[2025-06-29 09:56:19] Set percent complete: -1
[2025-06-29 09:56:19] Set status message: Verifying installation...
[2025-06-29 09:56:20] Verification complete
UpdateUI: skip show logo
[2025-06-29 09:56:20] Destroy window
[2025-06-29 09:56:20] Shutdown

Steam logging initialized: directory: /home/lolpowerluke/.local/share/Steam/logs

XRRGetOutputInfo Workaround: initialized with override: 0 real: 0xf66a0dc0
XRRGetCrtcInfo Workaround: initialized with override: 0 real: 0xf669f500
06/29 09:56:20 minidumps folder is set to /tmp/dumps
06/29 09:56:20 Init: Installing breakpad exception handler for appid(steamsysinfo)/version(1747701111)/tid(4247)
Running query: 1 - GpuTopology
Response: gpu_topology {
  gpus {
    id: 1
    name: "NVIDIA GeForce RTX 3060"
    vram_size_bytes: 12884901888
    driver_id: k_EGpuDriverId_NvidiaProprietary
    driver_version_major: 575
    driver_version_minor: 64
    driver_version_patch: 0
  }
  default_gpu_id: 1
}

Exit code: 0
Saving response to: /tmp/steamigIfcE - 48 bytes
steamwebhelper.sh[4250]: Using supervisor /home/lolpowerluke/.steam/root/ubuntu12_32/steam-runtime/amd64/usr/bin/steam-runtime-supervisor
steamwebhelper.sh[4250]: Starting steamwebhelper under bootstrap steamrt steam runtime via: /home/lolpowerluke/.local/share/Steam/steamrt64/steam-runtime-steamrt/_v2-entry-point
steamwebhelper.sh[4250]: Using CEF sandbox \(try with -no-cef-sandbox if this fails\)
steamwebhelper.sh[4250]: Starting steamwebhelper with steamrt steam runtime at /home/lolpowerluke/.local/share/Steam/steamrt64/steam-runtime-steamrt/_v2-entry-point
*** buffer overflow detected ***: terminated
/home/lolpowerluke/.local/share/Steam/steam.sh: line 960:  4236 Aborted                 (core dumped) "$STEAMROOT/$STEAMEXEPATH" "$@"

hope this helps

Bbeedell-roke 2025-06-29 github

@lolpowerluke, if it reproducibly dumps, you could try to catch it with lldb's --wait-for, then utilise bt all. Alternatively, if you need to wait some time to ascertain what steam's PID is before it dumps, could utilise gdb's -p option (then bt full) to capture a basic trace. Irrespective, check coredumpctl to see whether it's captured a coredump, then do what you would for gdb otherwise.

Llolpowerluke 2025-06-29 github

I got this backtrace using DEBUGGER=gdb steam, then run, then backtrace

#0  0xf7fc5579 in __kernel_vsyscall ()
#1  0xf7d2ca3f in __pthread_kill_implementation (threadid=threadid@entry=4157161344, signo=signo@entry=6, no_tid=no_tid@entry=0) at pthread_kill.c:43
#2  0xf7d2cb0d in __pthread_kill_internal (threadid=4157161344, signo=6) at pthread_kill.c:89
#3  0xf7cd1377 in __GI_raise (sig=6) at ../sysdeps/posix/raise.c:26
#4  0xf7cb81fa in __GI_abort () at abort.c:73
#5  0xf7cb93a4 in __libc_message_impl (fmt=<optimized out>) at ../sysdeps/posix/libc_fatal.c:134
#6  0xf7dd2d03 in __GI___fortify_fail (msg=0xf7e665dc "buffer overflow detected") at fortify_fail.c:24
#7  0xf7dd26ef in __GI___chk_fail () at chk_fail.c:28
#8  0xf6741c79 in strcpy (__dest=<optimized out>, __src=<optimized out>, __dest=<optimized out>, __src=<optimized out>) at /usr/include/bits/string_fortified.h:81
#9  FcFontCapabilities (face=0x57237d40) at ../fontconfig/src/fcfreetype.c:2671
[#10](/issue/ValveSoftware/steam-for-linux/10) FcFreeTypeQueryFaceInternal (face=0x57237d40, file=file@entry=0x57361590 "/usr/share/fonts/dai-banna-sil/DaiBannaSIL-Bold.ttf", id=id@entry=0, cs_share=0xffff5060, 
    ls_share=0xffff505c, nm_share=0xffff5058) at ../fontconfig/src/fcfreetype.c:1774
[#11](/issue/ValveSoftware/steam-for-linux/11) 0xf6743c63 in IA__FcFreeTypeQueryAll (file=0x57361590 "/usr/share/fonts/dai-banna-sil/DaiBannaSIL-Bold.ttf", id=0, blanks=0x0, count=0x0, set=0x5737f180)
    at ../fontconfig/src/fcfreetype.c:2217
[#12](/issue/ValveSoftware/steam-for-linux/12) 0xf6744208 in FcFileScanFontConfig (set=0x5737f180, file=<optimized out>, config=0x572f7440) at ../fontconfig/src/fcdir.c:90
[#13](/issue/ValveSoftware/steam-for-linux/13) FcFileScanConfig (set=set@entry=0x5737f180, dirs=dirs@entry=0x57352530, file=<optimized out>, config=0x572f7440) at ../fontconfig/src/fcdir.c:159
[#14](/issue/ValveSoftware/steam-for-linux/14) 0xf674489a in FcDirScanConfig (set=set@entry=0x5737f180, dirs=dirs@entry=0x57352530, dir=dir@entry=0x57655700 "/usr/share/fonts/dai-banna-sil", 
    force=<optimized out>, config=<optimized out>) at ../fontconfig/src/fcdir.c:276
[#15](/issue/ValveSoftware/steam-for-linux/15) 0xf6744ad5 in FcDirCacheScan (dir=<optimized out>, config=<optimized out>) at ../fontconfig/src/fcdir.c:356
[#16](/issue/ValveSoftware/steam-for-linux/16) 0xf6732c09 in IA__FcDirCacheRead (dir=0x57655700 "/usr/share/fonts/dai-banna-sil", force=0, config=0x572f7440) at ../fontconfig/src/fcdir.c:465
[#17](/issue/ValveSoftware/steam-for-linux/17) FcConfigAddDirList (config=config@entry=0x572f7440, set=set@entry=FcSetSystem, dirSet=0x57215010) at ../fontconfig/src/fccfg.c:524
[#18](/issue/ValveSoftware/steam-for-linux/18) 0xf6732d26 in IA__FcConfigBuildFonts (config=<optimized out>) at ../fontconfig/src/fccfg.c:557
[#19](/issue/ValveSoftware/steam-for-linux/19) 0xf6732e03 in FcInitLoadOwnConfigAndFonts (config=0x572f7440) at ../fontconfig/src/fcinit.c:188
[#20](/issue/ValveSoftware/steam-for-linux/20) IA__FcInitLoadConfigAndFonts () at ../fontconfig/src/fcinit.c:198
[#21](/issue/ValveSoftware/steam-for-linux/21) FcConfigEnsure () at ../fontconfig/src/fccfg.c:95
[#22](/issue/ValveSoftware/steam-for-linux/22) 0xf6745a0f in FcConfigInit () at ../fontconfig/src/fccfg.c:124
[#23](/issue/ValveSoftware/steam-for-linux/23) IA__FcInit () at ../fontconfig/src/fcinit.c:207
[#24](/issue/ValveSoftware/steam-for-linux/24) 0xe71f2449 in ?? () from /home/lolpowerluke/.local/share/Steam/ubuntu12_32/vgui2_s.so
[#25](/issue/ValveSoftware/steam-for-linux/25) 0xf4ed5cec in ?? () from /home/lolpowerluke/.local/share/Steam/ubuntu12_32/steamui.so
[#26](/issue/ValveSoftware/steam-for-linux/26) 0xf4ed501c in ?? () from /home/lolpowerluke/.local/share/Steam/ubuntu12_32/steamui.so
[#27](/issue/ValveSoftware/steam-for-linux/27) 0x567e5e1d in ?? ()
[#28](/issue/ValveSoftware/steam-for-linux/28) 0x567e70b8 in ?? ()
[#29](/issue/ValveSoftware/steam-for-linux/29) 0x567e81a5 in ?? ()
[#30](/issue/ValveSoftware/steam-for-linux/30) 0xf7cba575 in __libc_start_call_main (main=main@entry=0x567e8160, argc=argc@entry=2, argv=argv@entry=0xffffcae4) at ../sysdeps/nptl/libc_start_call_main.h:58
[#31](/issue/ValveSoftware/steam-for-linux/31) 0xf7cba64e in __libc_start_main_impl (main=0x567e8160, argc=2, argv=0xffffcae4, init=0x56f0ed20, fini=0x56f0ed90, rtld_fini=0xf7fcbf40 <_dl_fini>, 
    stack_end=0xffffcadc) at ../csu/libc-start.c:360
[#32](/issue/ValveSoftware/steam-for-linux/32) 0x567cf031 in ?? ()

I'm sorry if this isnt enough, but idk much about debugging so it would be appreciated if you could give a command I can run to get the required output, I will give the things you mentioned a go and let you know if I get any usefull output, although I dont know how succesfull that will be

Kkisak-valve maintainer 2025-06-29 github

Hello @lolpowerluke, what version of fontconfig are you using and are you able to roll back to the immediately previous version that was installed on your system? The functional part of that question is if there's a regression in that system package.

Llolpowerluke 2025-06-29 github

fontconfig:

[lolpowerluke@archlinux ~]$ pacman -Q | grep fontconfig
fontconfig 2:2.17.0-1
lib32-fontconfig 2:2.17.0-1

downgrading to 2:2.16.2-1 for both listed packages worked, ty

Kkisak-valve maintainer 2025-06-29 github

Thanks for checking, that makes this an upstream regression that should be reported to your distro's package maintainer for fontconfig and/or the upstream project.

Jjn64 2025-06-30 github

Upstream bug fixed but not yet released
https://gitlab.freedesktop.org/fontconfig/fontconfig/-/issues/481

Arch has backported the fix, you can upgrade to fontconfig 2:2.17.0-2

Llolpowerluke 2025-06-30 github

Steam launched without problems when using the updated fontconfig

fontconfig 2:2.17.0-2
lib32-fontconfig 2:2.17.0-2

Nothing extracted yet.