Package: passwordsafe
Version: 1.16.0+dfsg-4
Severity: important
Tags: upstream
X-Debbugs-Cc: debbug.passwords...@sideload.33mail.com

After upgrading from Bullseye to Bookworm, pwsafe crashes after
supplying the master password. Terminal output shows:

===8<----------------------------------------
pwsafe: ./src/core/PWSfileV1V2.cpp:391: size_t PWSfileV1V2::ReadCBC(unsigned 
char&, StringX&): Assertion `wcLen != 0' failed.
===8<----------------------------------------

I was previously able to access my passwords with version
1.12.0+dfsg-1. So this is a regression.

It’s worth noting that my DB file was originally created by Bruce
Schneier’s “pwsafe” CLI tool. That package died for some reason and as
a refugee I was forced to adopt this GUI “passwordsafe”, which was
originally claimed to be compatible with Schneier’s CLI tool. However,
it was only compatible in terms of *reading* the DB. Edits result in
corruption (yikes!). So I was crippled with version 1.12.0+dfsg-1 but
at least I could /read/ my DB. Of course this crash in version
1.16.0+dfsg-4 is a total show stopper.


-- System Information:
Debian Release: 12.5
  APT prefers stable-updates
  APT policy: (990, 'stable-updates'), (990, 'stable-security'), (990, 
'stable'), (500, 'oldstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.10.0-28-amd64 (SMP w/2 CPU threads)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages passwordsafe depends on:
ii  libc6                 2.36-9+deb12u6
ii  libgcc-s1             12.2.0-14
ii  libmagic1             1:5.44-3
ii  libqrencode4          4.1.1-1
ii  libstdc++6            12.2.0-14
ii  libuuid1              2.38.1-5+deb12u1
ii  libwxbase3.0-0v5      3.0.5.1+dfsg-2
ii  libwxgtk3.0-gtk3-0v5  3.0.5.1+dfsg-2
ii  libx11-6              2:1.8.4-2+deb12u2
ii  libxerces-c3.2        3.2.4+debian-1
ii  libxtst6              2:1.2.3-1.1
ii  libykpers-1-1         1.20.0-3
ii  passwordsafe-common   1.16.0+dfsg-4

Versions of packages passwordsafe recommends:
ii  xvkbd  4.1-2

passwordsafe suggests no packages.

-- no debconf information

Reply via email to