Your message dated Sun, 27 Jan 2008 12:17:02 +0000
with message-id <[EMAIL PROTECTED]>
and subject line Bug#462224: fixed in findutils 4.2.32-1
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--- Begin Message ---
Package: findutils
Version: 4.2.31-4
Severity: important

Hi,

The first line in the function list_file() in file lib/listfile.c looks
as follows:

  char modebuf[11];

This variable is then passed on to a function strmode:

  strmode (statp->st_mode, modebuf);

That function is found in gnulib/lib/filemode.c, and contains the
following (amongst others):

void
strmode (mode_t mode, char *str)
{
[...]
  str[11] = '\0';
}

This call is off by one, resulting in stack corruption. On m68k, the
overwritten data is the frame pointer of list_file()'s calling function,
resulting in a segfault when list_file tries to restore that frame
pointer to the right register.

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: powerpc (ppc)

Kernel: Linux 2.6.23-1-powerpc
Locale: LANG=nl_BE.UTF-8, LC_CTYPE=nl_BE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages findutils depends on:
ii  libc6                         2.7-6      GNU C Library: Shared libraries

findutils recommends no packages.

-- no debconf information



--- End Message ---
--- Begin Message ---
Source: findutils
Source-Version: 4.2.32-1

We believe that the bug you reported is fixed in the latest version of
findutils, which is due to be installed in the Debian FTP archive:

findutils_4.2.32-1.diff.gz
  to pool/main/f/findutils/findutils_4.2.32-1.diff.gz
findutils_4.2.32-1.dsc
  to pool/main/f/findutils/findutils_4.2.32-1.dsc
findutils_4.2.32-1_i386.deb
  to pool/main/f/findutils/findutils_4.2.32-1_i386.deb
findutils_4.2.32.orig.tar.gz
  to pool/main/f/findutils/findutils_4.2.32.orig.tar.gz
locate_4.2.32-1_i386.deb
  to pool/main/f/findutils/locate_4.2.32-1_i386.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Andreas Metzler <[EMAIL PROTECTED]> (supplier of updated findutils package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Sun, 27 Jan 2008 10:18:07 +0100
Source: findutils
Binary: findutils locate
Architecture: source i386
Version: 4.2.32-1
Distribution: unstable
Urgency: low
Maintainer: Andreas Metzler <[EMAIL PROTECTED]>
Changed-By: Andreas Metzler <[EMAIL PROTECTED]>
Description: 
 findutils  - utilities for finding files--find, xargs
 locate     - maintain and query an index of a directory tree
Closes: 400936 459570 462224
Changes: 
 findutils (4.2.32-1) unstable; urgency=low
 .
   * New upstream version.
     - Fixes memory-corruption caused by off-by-one error in lib/listfile.c.
       Closes: #462224
     - Correct docs for %b printf specifier in info manual, too.
       (Closes: #400936)
    * License now GPLv3+, update debian/copyright.
    * Try to preserve user changes of updatedb.conf on upgrading from findutils
      versions with included locate: If updatedb.conf is user modified and
      /etc/updatedb.findutils.cron.local does not yet exist, generate the
      latter from the former. Closes: #459570
    * Point watch file to ftp.gnu.org instead of alpha.
Files: 
 c0aebd9927cbe02f3fa6fcd688c238e6 671 utils required findutils_4.2.32-1.dsc
 aaa6beeb41a6f04963dff58f24a55b96 1431566 utils required 
findutils_4.2.32.orig.tar.gz
 1c084971113c92be7a1933b59ad97b2d 18336 utils required 
findutils_4.2.32-1.diff.gz
 7ed95a4314a35248b4a758911f7a83a1 343366 utils required 
findutils_4.2.32-1_i386.deb
 6ab500c4650400bff5ef64c86358011a 112490 utils optional locate_4.2.32-1_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFHnHNbHTOcZYuNdmMRAuCCAJ48KNGPmPmO3S6WFkfVJI6j4JRd/ACfcV6l
zKV+yihlLDnwK92RCW/PaJY=
=QOY8
-----END PGP SIGNATURE-----



--- End Message ---

Reply via email to