Your message dated Sun, 23 Mar 2008 21:03:10 +0000
with message-id <[EMAIL PROTECTED]>
and subject line Bug#470262: fixed in rssh 2.3.2-6
has caused the Debian Bug report #470262,
regarding rssh: Segmentation fault on none existing config file.
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [EMAIL PROTECTED]
immediately.)


-- 
470262: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=470262
Debian Bug Tracking System
Contact [EMAIL PROTECTED] with problems
--- Begin Message ---
Package: rssh
Version: 2.3.2-2
Severity: normal
Tags: patch

If the rssh.conf file is not accessible rssh could seg fault due not catching 
the
null return of fopen. Patch:

--- rssh-2.3.2.org/rsshconf.c   2005-11-27 23:35:43.000000000 +0100
+++ rssh-2.3.2/rsshconf.c       2008-03-10 09:59:47.757043354 +0100
@@ -135,9 +135,11 @@
        log = do_log;
        memset(line, 0, CFG_LINE_LEN + 1);
         cfg_file = fopen(filename, "r");
-        if (!cfg_file && log ) {
-               log_set_priority(LOG_WARNING);
-               log_msg("config file (%s) missing, using defaults", filename);
+        if (!cfg_file) {
+               if (log) {
+                   log_set_priority(LOG_WARNING);
+                   log_msg("config file (%s) missing, using defaults", 
filename);
+               }
                 opts->shell_flags = RSSH_ALLOW_SCP;
                return FALSE;
         }


-- System Information:
Debian Release: 4.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-6-686
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)

Versions of packages rssh depends on:
ii  debconf [debconf-2.0]  1.5.11etch1       Debian configuration management sy
ii  libc6                  2.3.6.ds1-13etch5 GNU C Library: Shared libraries
ii  openssh-server         1:4.3p2-9         Secure shell server, an rshd repla

rssh recommends no packages.

-- debconf information excluded



--- End Message ---
--- Begin Message ---
Source: rssh
Source-Version: 2.3.2-6

We believe that the bug you reported is fixed in the latest version of
rssh, which is due to be installed in the Debian FTP archive:

rssh_2.3.2-6.diff.gz
  to pool/main/r/rssh/rssh_2.3.2-6.diff.gz
rssh_2.3.2-6.dsc
  to pool/main/r/rssh/rssh_2.3.2-6.dsc
rssh_2.3.2-6_i386.deb
  to pool/main/r/rssh/rssh_2.3.2-6_i386.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Russ Allbery <[EMAIL PROTECTED]> (supplier of updated rssh package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Sun, 23 Mar 2008 12:46:52 -0700
Source: rssh
Binary: rssh
Architecture: source i386
Version: 2.3.2-6
Distribution: unstable
Urgency: low
Maintainer: Jesus Climent <[EMAIL PROTECTED]>
Changed-By: Russ Allbery <[EMAIL PROTECTED]>
Description: 
 rssh       - Restricted shell allowing only scp, sftp, cvs, rsync and/or rdist
Closes: 458563 465528 470262 471803
Changes: 
 rssh (2.3.2-6) unstable; urgency=low
 .
   * Allow the -e option to rsync in conjunction with --server when it
     contains a protocol version.  As of version three, rsync reused the -e
     option to pass protocol information.  (Closes: #471803)
   * Avoid a segfault when logging is disabled and the configuration file
     could not be opened.  Thanks, Thomas Liske.  (Closes: #470262)
   * Update the example mkchroot.sh script, thanks to Carsten Maass and
     proctor mcduff.  (Closes: #465528)
     - Fix the parsing of ldd output.
     - Create /dev/null and /dev/log in the chroot.
     - Update the sftp-server and rssh_chroot_helper paths for Debian.
     - Copy /etc/ld.* files recursively.
     - Add better error handling.
   * Suggest makejail for the chroot setup.  (Closes: #458563)
   * Clean all patches of extraneous headers and timestamps.
   * Mention in README.Debian that the upstream maintainer doesn't plan
     future releases and therefore major new work (such as Subversion
     support) may require taking over upstream maintenance.
   * Add a Homepage control field and drop the XS-* prefixes for the Vcs
     control fields.
   * Add the upstream copyright statement and the complete license to
     debian/copyright.
   * Add a watch file.
   * debian/rules cleanup:
     - Use a stamp file for installation.
     - Depend on the quilt stamp file to prevent repeating configure.
     - Use touch $@ to create stamp files.
     - Simplify the rule structure.
   * Update standards version to 3.7.3 (no changes required).
Files: 
 c0fdef5a685da302acc64cf59601f342 808 net optional rssh_2.3.2-6.dsc
 76f1d898712aca6054d469114b1cff88 17860 net optional rssh_2.3.2-6.diff.gz
 723ed70ede8fb79aa4e1cdaf0092cbc7 48754 net optional rssh_2.3.2-6_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD4DBQFH5rsT+YXjQAr8dHYRAp3CAJ9XdvUegn7aBVpjeJa+ZH8n7T/qrwCY+oaq
Hs/uodG/NCo/I18io9pa7w==
=16JY
-----END PGP SIGNATURE-----



--- End Message ---

Reply via email to