Your message dated Sun, 27 Apr 2008 18:32:12 +0000
with message-id <[EMAIL PROTECTED]>
and subject line Bug#476571: fixed in neon27 0.28.2-2
has caused the Debian Bug report #476571,
regarding libneon27: segmentation fault with dav/https shares
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [EMAIL PROTECTED]
immediately.)


-- 
476571: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=476571
Debian Bug Tracking System
Contact [EMAIL PROTECTED] with problems
--- Begin Message ---
Package: libneon27
Version: 0.28.2-1
Severity: normal

Hi,

I have a weird problem using svn with https dav repository, since 0.28 (it
worked and still works fine using 0.27).

The problem occurrs only on a private intranet and I couldnt reproduce it
outside yet, so I'm not able to give a backtrace, yet, sorry (I'll try to drop
all possible private info from the backtrace and post them later).

Basically, the segfault is in src/ne_uri.c, in merge_paths() function.
It tries to test base->path[0], but in my case, it's NULL, so the comparison
leads to a segfault.

When I follow the stack trace, it gives:
ne_uri.c:merge_paths()
ne_uri.c:ne_uri_resolve()
ne_auth.c:parse_domain()

It's in parse_domain() where base is initialized. There's a memset to 0, and
following the execution flow, I cant see where base->path could be initialized
and some memory allocated. Just after that, there is:

base.path = absolute.path;

So I guess testing (and setting) the base.path in merge_paths() is useless
anyway, but moving the instruction before the call to ne_uri_resolve() doesn't
solve the problem. The call to ne_uri_resolve is part of a loop, and the
second turn is with a base->path set to NULL again.

I know this bug report isn't really detailed enough, but the fact path is
never allocated seems wrong to me (and this part of the code has changed a lot
since 0.27). Maybe upstream could have some pointer on this?

(oh and btw, I've wrote this BR on an etch machine, but I'm testing on an
up-to-date sid box).

Thanks for your time, and regards,

--
Yves-Alexis Perez

-- System Information:
Debian Release: 4.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-6-amd64
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)



--- End Message ---
--- Begin Message ---
Source: neon27
Source-Version: 0.28.2-2

We believe that the bug you reported is fixed in the latest version of
neon27, which is due to be installed in the Debian FTP archive:

libneon27-dbg_0.28.2-2_amd64.deb
  to pool/main/n/neon27/libneon27-dbg_0.28.2-2_amd64.deb
libneon27-dev_0.28.2-2_amd64.deb
  to pool/main/n/neon27/libneon27-dev_0.28.2-2_amd64.deb
libneon27-gnutls-dbg_0.28.2-2_amd64.deb
  to pool/main/n/neon27/libneon27-gnutls-dbg_0.28.2-2_amd64.deb
libneon27-gnutls-dev_0.28.2-2_amd64.deb
  to pool/main/n/neon27/libneon27-gnutls-dev_0.28.2-2_amd64.deb
libneon27-gnutls_0.28.2-2_amd64.deb
  to pool/main/n/neon27/libneon27-gnutls_0.28.2-2_amd64.deb
libneon27_0.28.2-2_amd64.deb
  to pool/main/n/neon27/libneon27_0.28.2-2_amd64.deb
neon27_0.28.2-2.diff.gz
  to pool/main/n/neon27/neon27_0.28.2-2.diff.gz
neon27_0.28.2-2.dsc
  to pool/main/n/neon27/neon27_0.28.2-2.dsc



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Laszlo Boszormenyi (GCS) <[EMAIL PROTECTED]> (supplier of updated neon27 
package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Mon, 21 Apr 2008 13:56:22 +0200
Source: neon27
Binary: libneon27 libneon27-dev libneon27-dbg libneon27-gnutls 
libneon27-gnutls-dev libneon27-gnutls-dbg
Architecture: source amd64
Version: 0.28.2-2
Distribution: unstable
Urgency: low
Maintainer: Laszlo Boszormenyi (GCS) <[EMAIL PROTECTED]>
Changed-By: Laszlo Boszormenyi (GCS) <[EMAIL PROTECTED]>
Description: 
 libneon27  - An HTTP and WebDAV client library
 libneon27-dbg - Detached symbols for libneon27
 libneon27-dev - Header and static library files for libneon27
 libneon27-gnutls - An HTTP and WebDAV client library (GnuTLS enabled)
 libneon27-gnutls-dbg - Detached symbols for libneon27 (GnuTLS enabled)
 libneon27-gnutls-dev - Header and static library files for libneon27 (GnuTLS 
enabled)
Closes: 474139 476571
Changes: 
 neon27 (0.28.2-2) unstable; urgency=low
 .
   * Only the GnuTLS flavour needs to be configured with --with-ca-bundle
     (closes: #474139).
   * Fix segfault with dav/https shares (closes: #476571), thanks to
     Yves-Alexis Perez for the patch.
Checksums-Sha1: 
 79cdda5a28e6da380f8e00597201b32c40789655 1218 neon27_0.28.2-2.dsc
 596dcfdc0f62c61704279cdb7eab1c635ba68c35 7797 neon27_0.28.2-2.diff.gz
 45cd69dc2a3ed46fd8babaedc17ab5600c4fd538 144336 libneon27_0.28.2-2_amd64.deb
 202912eca074b7b2a6d44a82c306a907d3edf6b1 416180 
libneon27-dev_0.28.2-2_amd64.deb
 cdebf19cd7cf4b7f8c3d020e7039248fbc16d126 186400 
libneon27-dbg_0.28.2-2_amd64.deb
 4fc2a5eb1d242abcf15e0a3d1cfdf00452a8d49f 118842 
libneon27-gnutls_0.28.2-2_amd64.deb
 67be3a6a9e931c8f9a7a42b58cfaf3faec0c2170 390168 
libneon27-gnutls-dev_0.28.2-2_amd64.deb
 a1b53f53600ccaa6958c7a034eb72b7801b32766 167828 
libneon27-gnutls-dbg_0.28.2-2_amd64.deb
Checksums-Sha256: 
 730a1663c85449eb957ed3dacce666629cc17916078e9f8eb746bd42a7c65e72 1218 
neon27_0.28.2-2.dsc
 b02bffead850d93b07e9486b18afcb469fedcc6a374b5686a8b28eb342397429 7797 
neon27_0.28.2-2.diff.gz
 b07024e3690282a3f3828f1ff0d85d8625990335eca998755a0d4b9d62d421b2 144336 
libneon27_0.28.2-2_amd64.deb
 d66ce288e5d4b4011f87776b27c4b9b858f025c9048d72f835a93b38c154eb90 416180 
libneon27-dev_0.28.2-2_amd64.deb
 1aa4996df68f9455c899673dfe770045ea3759d352c02dd9099ca9d94f596823 186400 
libneon27-dbg_0.28.2-2_amd64.deb
 2a9f88baf269c1918690442562bd7ebd36b611a42d6239d5498e99293de1ac84 118842 
libneon27-gnutls_0.28.2-2_amd64.deb
 8b1f91fdfe07d03ec766c7d043680b937d6e9296fac8a81776c120adbf4c88d6 390168 
libneon27-gnutls-dev_0.28.2-2_amd64.deb
 d0433d7e19aa8553b83d0107fb7bd1bc956905dc57e093c13c8d710475a3080c 167828 
libneon27-gnutls-dbg_0.28.2-2_amd64.deb
Files: 
 efcaccc1adf69f4a508968e36be8e0f9 1218 net optional neon27_0.28.2-2.dsc
 149d89a974f382fc35671f434c60f399 7797 net optional neon27_0.28.2-2.diff.gz
 cbf8c281546123ea2ac8a9628e98cbc8 144336 libs optional 
libneon27_0.28.2-2_amd64.deb
 fae7980fa586318214d46ecb67810018 416180 libdevel optional 
libneon27-dev_0.28.2-2_amd64.deb
 56422a046971dac02cbbc4691e8bbf24 186400 libdevel extra 
libneon27-dbg_0.28.2-2_amd64.deb
 b1048921ffe733a956817da62286b200 118842 libs optional 
libneon27-gnutls_0.28.2-2_amd64.deb
 446b10a5452bba02b1845d98d1e11502 390168 libdevel optional 
libneon27-gnutls-dev_0.28.2-2_amd64.deb
 02b9cc103f0a28e52c52f6672058fc30 167828 libdevel extra 
libneon27-gnutls-dbg_0.28.2-2_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAkgUxGkACgkQMDatjqUaT91dlgCfV/8olMfGTfyXaJWPEfm0gcHp
xY4An3l+OpRaUFtyXEqAiuP+oIoiW1A4
=LGPB
-----END PGP SIGNATURE-----



--- End Message ---

Reply via email to