Your message dated Sun, 04 Apr 2010 11:24:38 +0000
with message-id <[email protected]>
and subject line Bug#576367: fixed in cuetools 1.3.1-8
has caused the Debian Bug report #576367,
regarding "Buffer overflow detected" error when using cueconvert
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
576367: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=576367
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: cuetools
Version: 1.3.1-4
Severity: important
Tags: patch
Hi,
I thought I had submitted this bug to Debian too, but I might have
forgotten. When converting .toc files to .cue files, I get a "buffer
overflow detected" warning and a core dump.
The following patch fixes the buffer overflow by sizing a buffer used in
a sprintf call correctly to also include room for the null character at
the end of the string. Please apply.
Here is the Ubuntu bug:
https://bugs.launchpad.net/ubuntu/+source/cuetools/+bug/392372
And here is the upstream bug (but no answer):
http://developer.berlios.de/bugs/?func=detailbug&bug_id=16607&group_id=2130
Thank you,
Christian
--- src/lib/time.c~ 2009-12-29 13:51:16.000000000 -0500
+++ src/lib/time.c 2009-12-29 13:51:19.000000000 -0500
@@ -34,7 +34,7 @@
/* print frame in mm:ss:ff format */
char *time_frame_to_mmssff(long f)
{
- static char msf[9];
+ static char msf[10];
int minutes, seconds, frames;
msf_frame_to_msf(f, &minutes, &seconds, &frames);
--- End Message ---
--- Begin Message ---
Source: cuetools
Source-Version: 1.3.1-8
We believe that the bug you reported is fixed in the latest version of
cuetools, which is due to be installed in the Debian FTP archive:
cuetools_1.3.1-8.debian.tar.gz
to main/c/cuetools/cuetools_1.3.1-8.debian.tar.gz
cuetools_1.3.1-8.dsc
to main/c/cuetools/cuetools_1.3.1-8.dsc
cuetools_1.3.1-8_i386.deb
to main/c/cuetools/cuetools_1.3.1-8_i386.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Patrick Matthäi <[email protected]> (supplier of updated cuetools package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Sun, 04 Apr 2010 12:31:03 +0200
Source: cuetools
Binary: cuetools
Architecture: source i386
Version: 1.3.1-8
Distribution: unstable
Urgency: low
Maintainer: Patrick Matthäi <[email protected]>
Changed-By: Patrick Matthäi <[email protected]>
Description:
cuetools - tools for manipulating CUE/TOC files
Closes: 576367
Changes:
cuetools (1.3.1-8) unstable; urgency=low
.
* Bump Standards-Version to 3.8.4 (no changes needed).
* Convert package to the 3.0 (quilt) format.
* Add patch 06-buffer-overflow-cueconvert.diff, which fixes a false "Buffer
overflow detected" in cueconvert. Thanks for the patch to Christian Hudon.
Closes: #576367
Checksums-Sha1:
c1ee0304be951cff0ca1068611f3b5f099471081 1054 cuetools_1.3.1-8.dsc
040fec3447bf62fdc79f00f25b07b97f5b170837 13458 cuetools_1.3.1-8.debian.tar.gz
4dd34260811cd6ed853fb420c8963e00ebc8e494 80452 cuetools_1.3.1-8_i386.deb
Checksums-Sha256:
2d0b72e948ea5afe294a56c1de06d299ce2bb488b52e5d4ce54a1cc5dbe11453 1054
cuetools_1.3.1-8.dsc
59f2fcb8def69276c2eec0956ef7525d0f09d1ff967c87ddd95ef47c7c441047 13458
cuetools_1.3.1-8.debian.tar.gz
040eec471cf36056cbdab5b15dfebbde42111250fb741c575e1d3e54cfc130a8 80452
cuetools_1.3.1-8_i386.deb
Files:
b4eb5baf1b5194555745b3a8a7693a7a 1054 utils extra cuetools_1.3.1-8.dsc
29cfb92d22d74cc42e2f56433736f2b7 13458 utils extra
cuetools_1.3.1-8.debian.tar.gz
fe888183d819e7aa23274bad867d533a 80452 utils extra cuetools_1.3.1-8_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
iEYEARECAAYFAku4a5wACgkQ2XA5inpabMeaGQCdGJycNj3M0AuInWd0d+qw/6+G
g/kAoKeWAsZ5kF89j4ktKgGzOiJyEgfO
=SqHk
-----END PGP SIGNATURE-----
--- End Message ---
