Your message dated Tue, 12 Jun 2007 01:32:03 +0000
with message-id <[EMAIL PROTECTED]>
and subject line Bug#351217: fixed in libpam-unix2 2.1-1
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--- Begin Message ---
Package: libpam-unix2
Version: 1.25-1
Severity: important


Until now, we had a problem: all applications using PAM for
authentication, like sshd, wdm and su, did crash with a segmentation
every time that a user did type a wrong password. This happened on amd64
machines with Debian "sarge" 3.1 (libc 2.3.2) and the latest pam_unix2
1.30 (and also with version 1.25). Note that it also happens on i386, but
the consequence is just a warning message.

Gdb did show that the crash happened because of the free() at
unix_auth.c:89 (_cleanup_message). It seems to free memory that was
previously allocated with 'alloca'. Is this right? Reading the man-page,
I have the impression that memory allocated with alloca is on the stack
and not on the heap and that therefore shouldn't be freed. I did
comment out that line, and now everything is fine. No more segmentation
faults...

I did send the above bug-report already upstream on the 2006-01-30 (without
an answer yet).

Cheers
David

-- System Information:
Debian Release: 3.1
Architecture: i386 (i686)
Kernel: Linux 2.6.15.1-ia32-isg-ee-sm-pxe-smp-1
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)

Versions of packages libpam-unix2 depends on:
ii  libc6                       2.3.2.ds1-22 GNU C Library: Shared libraries an
ii  libpam0g                    0.76-22      Pluggable Authentication Modules l
ii  libxcrypt1                  2.2-1        Crypt library for DES, MD5, and bl

-- no debconf information


--- End Message ---
--- Begin Message ---
Source: libpam-unix2
Source-Version: 2.1-1

We believe that the bug you reported is fixed in the latest version of
libpam-unix2, which is due to be installed in the Debian FTP archive:

libpam-unix2_2.1-1.diff.gz
  to pool/main/libp/libpam-unix2/libpam-unix2_2.1-1.diff.gz
libpam-unix2_2.1-1.dsc
  to pool/main/libp/libpam-unix2/libpam-unix2_2.1-1.dsc
libpam-unix2_2.1-1_amd64.deb
  to pool/main/libp/libpam-unix2/libpam-unix2_2.1-1_amd64.deb
libpam-unix2_2.1.orig.tar.gz
  to pool/main/libp/libpam-unix2/libpam-unix2_2.1.orig.tar.gz



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Ivan Kohler <[EMAIL PROTECTED]> (supplier of updated libpam-unix2 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Mon, 11 Jun 2007 17:16:26 -0700
Source: libpam-unix2
Binary: libpam-unix2
Architecture: source amd64
Version: 2.1-1
Distribution: unstable
Urgency: low
Maintainer: Ivan Kohler <[EMAIL PROTECTED]>
Changed-By: Ivan Kohler <[EMAIL PROTECTED]>
Description: 
 libpam-unix2 - Blowfish-capable PAM module
Closes: 313780 351217 376556 427058
Changes: 
 libpam-unix2 (2.1-1) unstable; urgency=low
 .
   * New upstream release
     + Fix segfault on amd64 arch (& warning on i386) by replacing alloca with
       malloc (closes: Bug#351217)
     + Updates de.po translation; incorporates still-relevant changes from
       outstanding translation patch (closes: Bug#313780)
   * Properly implement the
     /etc/default/passwd to /etc/security/pam_unix2.default substitution with a
     dpatch, so it doesn't accidentally get lost again (closes: Bug#427058)
   * Acknowledge NMU removing Build-Dep on automake (closes: Bug#376556), thanks
     to Eric Dorland.
Files: 
 e83efbd6497eabd721bdba52cae05abf 623 admin extra libpam-unix2_2.1-1.dsc
 d185fca919a9244dedda5e1b16a5ef58 251846 admin extra 
libpam-unix2_2.1.orig.tar.gz
 8e496d225559a6c51962dfea5c68005a 19771 admin extra libpam-unix2_2.1-1.diff.gz
 ac6cd641bf9ed456e9336c2ece527bdf 57946 admin extra libpam-unix2_2.1-1_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFGbfZ4gYcvm1TBwckRAjhiAJ9yBrNnX9sQ3iIhYJdxg37IB9++cACaAyTp
c/J2ZoMiopv9ACfQtTT4Cx4=
=m3BS
-----END PGP SIGNATURE-----


--- End Message ---

Reply via email to