Your message dated Sat, 09 May 2015 16:00:27 +0000
with message-id <[email protected]>
and subject line Bug#750077: fixed in netsniff-ng 0.5.9-1
has caused the Debian Bug report #750077,
regarding netsniff-ng: Conditional operator does not typecheck
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
750077: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=750077
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: netsniff-ng
Version: 0.5.8-2
Usertags: goto-cc
During a rebuild of all Debian packages in a clean sid chroot (using cowbuilder
and pbuilder) the build failed with the following error. Please note that we
use our research compiler tool-chain (using tools from the cbmc package), which
permits extended reporting on type inconsistencies at link time.
[...]
CC staging/modifications.c
file staging/modifications.c line 641 function print_frame_details: in
expression `(void)bs2str(tx.ip_payload, pld, (signed int)tx.ip_payload_s)':
conversion from `void' to `char *': implicit conversion not permitted
CONVERSION ERROR
Makefile:167: recipe for target 'mausezahn/staging/modifications.o' failed
make[1]: *** [mausezahn/staging/modifications.o] Error 64
make[1]: Leaving directory
'/srv/jenkins-slave/workspace/sid-goto-cc-netsniff-ng/netsniff-ng-0.5.8'
debian/rules:29: recipe for target 'build-stamp' failed
make: *** [build-stamp] Error 2
This is the conditional operator used here:
http://sources.debian.net/src/netsniff-ng/0.5.8-2/staging/modifications.c?hl=641#L641
The true case is cast to void, but strcpy has return type char*. Yet the C
standard requires that the second and third argument of the conditional
operator ?: are both void or compatible pointer types (there are several other
cases, see 6.5.15 of the C Standard). Failing this, the compiler may produce
arbitrary code.
The best fix is likely adding a (void) in front of strcpy here.
Best,
Michael
pgppcNZSBHD6I.pgp
Description: PGP signature
--- End Message ---
--- Begin Message ---
Source: netsniff-ng
Source-Version: 0.5.9-1
We believe that the bug you reported is fixed in the latest version of
netsniff-ng, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Kartik Mistry <[email protected]> (supplier of updated netsniff-ng package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sat, 09 May 2015 20:13:45 +0530
Source: netsniff-ng
Binary: netsniff-ng
Architecture: source amd64
Version: 0.5.9-1
Distribution: unstable
Urgency: low
Maintainer: Daniel Borkmann <[email protected]>
Changed-By: Kartik Mistry <[email protected]>
Description:
netsniff-ng - Linux network packet sniffer toolkit
Closes: 749057 750077
Changes:
netsniff-ng (0.5.9-1) unstable; urgency=low
.
* New upstream release:
+ Conditional operator does not typecheck (Closes: #750077)
* debian/control:
+ Set arch:any (Closes: 749057)
+ Updated Standards-Version to 3.9.6
* debian/copyright:
+ Updated copyright and fixed wildcard match.
Checksums-Sha1:
972fa3b23297126c33f1ef4723380efb01b8a626 2168 netsniff-ng_0.5.9-1.dsc
de821e7c4fac7328fd710c098a7a8b0187c3745f 589664 netsniff-ng_0.5.9.orig.tar.bz2
90dcfe369b455837c8567d1ad8958679ea0bec89 4344 netsniff-ng_0.5.9-1.debian.tar.xz
647c6e4430997344d57550f75846887fe62d10a7 545956 netsniff-ng_0.5.9-1_amd64.deb
Checksums-Sha256:
d26416f62d9615f77ef7bf9cb47187a88b15b4254de50d70f3ee0044c9b4f104 2168
netsniff-ng_0.5.9-1.dsc
44973147681319e8e1f8b21dd8f1e22a58a68f6f9a3eaf297cf959944ec40e04 589664
netsniff-ng_0.5.9.orig.tar.bz2
44811fa1db7e769dcc3e56def7b6300f040cb464909d7e46126a415f536432c9 4344
netsniff-ng_0.5.9-1.debian.tar.xz
14ca918682d6ed0f8d5e30eb96bfcbea924a7aabe2fea134cc92790b6f867673 545956
netsniff-ng_0.5.9-1_amd64.deb
Files:
ad079ccb99f753523a295762d65e7b76 2168 net optional netsniff-ng_0.5.9-1.dsc
9c93510823c8abe2a4d36be388de7c73 589664 net optional
netsniff-ng_0.5.9.orig.tar.bz2
792c98f5233f46a9633395cb88ddf029 4344 net optional
netsniff-ng_0.5.9-1.debian.tar.xz
1f1dd26c36b1390982dec4f23bd639da 545956 net optional
netsniff-ng_0.5.9-1_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=HjzU
-----END PGP SIGNATURE-----
--- End Message ---
