Your message dated Thu, 12 May 2016 17:24:59 +0000 with message-id <[email protected]> and subject line Bug#824067: fixed in libdbi-drivers 0.9.0-4 has caused the Debian Bug report #824067, regarding libdbi-drivers: Memory issue causing segmentation faults in reverse dependencies to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [email protected] immediately.) -- 824067: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=824067 Debian Bug Tracking System Contact [email protected] with problems
--- Begin Message ---Source: libdbi-drivers Version: 0.9.0-3 Severity: important Tags: patch Dear Maintainer, I've identified a problem in libdbd-sqlite3 which causes segfaults in for instance the test suite of OpenBSC. See #818567 The following patch fixes it: Index: libdbi-drivers/drivers/sqlite3/dbd_sqlite3.c =================================================================== --- libdbi-drivers.orig/drivers/sqlite3/dbd_sqlite3.c 2016-05-11 21:13:28.927363294 +0200 +++ libdbi-drivers/drivers/sqlite3/dbd_sqlite3.c 2016-05-11 21:14:13.412832180 +0200 @@ -1451,15 +1451,15 @@ break; } - word_lower[item-start+1]; - strncpy(word_lower,start,item-start); - word_lower[item-start] = '\0'; + char word_lower2[item-start+1]; + strncpy(word_lower2,start,item-start); + word_lower2[item-start] = '\0'; int i = 0; - while (word_lower[i]) { - word_lower[i] = tolower(word_lower[i]); + while (word_lower2[i]) { + word_lower2[i] = tolower(word_lower2[i]); i++; } - if ( strcmp("join",word_lower) == 0 ) { + if ( strcmp("join",word_lower2) == 0 ) { //printf("stop skip after join found\n"); // we have found the next join, stop skipping join_flag = 1; @@ -1467,7 +1467,7 @@ break; } for ( i = 0 ; i < (sizeof(endwords)/sizeof *(endwords)) ; i++ ) { - if ( strcmp(endwords[i],word_lower) == 0 ) { + if ( strcmp(endwords[i],word_lower2) == 0 ) { /* printf("end word!\n"); */ return index; I've also reported this bug upstream, and maybe they will come up with a more beautiful patch. Regards Ruben
--- End Message ---
--- Begin Message ---Source: libdbi-drivers Source-Version: 0.9.0-4 We believe that the bug you reported is fixed in the latest version of libdbi-drivers, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [email protected], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Laszlo Boszormenyi (GCS) <[email protected]> (supplier of updated libdbi-drivers package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [email protected]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 12 May 2016 16:43:16 +0000 Source: libdbi-drivers Binary: libdbd-sqlite libdbd-sqlite3 libdbd-mysql libdbd-pgsql libdbd-freetds Architecture: source amd64 Version: 0.9.0-4 Distribution: unstable Urgency: medium Maintainer: Laszlo Boszormenyi (GCS) <[email protected]> Changed-By: Laszlo Boszormenyi (GCS) <[email protected]> Description: libdbd-freetds - Freetds database server driver for libdbi libdbd-mysql - MySQL database server driver for libdbi libdbd-pgsql - PostgreSQL database server driver for libdbi libdbd-sqlite - SQLite database driver for libdbi libdbd-sqlite3 - SQLite3 database driver for libdbi Closes: 824067 Changes: libdbi-drivers (0.9.0-4) unstable; urgency=medium . * dbd_sqlite3: resolve a stack buffer overflow (closes: #824067). * Update Standards-Version to 3.9.8 . Checksums-Sha1: 4185d4d984a2335d0b9d72174e9ce3872ae8b206 2487 libdbi-drivers_0.9.0-4.dsc f5161afd1194040b45a885856e18736a554698e8 10404 libdbi-drivers_0.9.0-4.debian.tar.xz 144cac25c00e8aa2f8537bd7cf545580b007ebec 15446 libdbd-freetds-dbgsym_0.9.0-4_amd64.deb 5eee938b70b8957f9aad830cbdbf22ecfcf9a5fd 17882 libdbd-freetds_0.9.0-4_amd64.deb 4b3dcaa1de82400eb5579dcf30ac160cad29314e 19090 libdbd-mysql-dbgsym_0.9.0-4_amd64.deb 8f21748c10d2c48ea6f95c4800d3050df86299c6 151814 libdbd-mysql_0.9.0-4_amd64.deb bb904555d1acede863b3899d165c0f6771a4a5fa 17478 libdbd-pgsql-dbgsym_0.9.0-4_amd64.deb b993f20eac2756449f33d55594f03b256883dd4e 150236 libdbd-pgsql_0.9.0-4_amd64.deb 494583028a967951d96b1e0624d856f46c7a55e9 19810 libdbd-sqlite-dbgsym_0.9.0-4_amd64.deb d966879ade0da70d5f2e33989b8180d5ab538c90 24972 libdbd-sqlite3-dbgsym_0.9.0-4_amd64.deb fecaebf97b17bd6e6c0f0eb7ed57ce1059d796b9 180114 libdbd-sqlite3_0.9.0-4_amd64.deb f2a28c7ff7a3441361b5b1f30774c47f429a55eb 178044 libdbd-sqlite_0.9.0-4_amd64.deb Checksums-Sha256: 95b17b20eb6a62efab0625cd3c0c3a02748670fa922f9633e223e2b552bb306f 2487 libdbi-drivers_0.9.0-4.dsc 63bb5ab91d8f28d65a807fcd1db3a5e037b17caa5e8914b20f78af97fcbe0aea 10404 libdbi-drivers_0.9.0-4.debian.tar.xz 0642b6145e1b9cb4dd17c4e1d6068926690575799cb81b35ce3542433a2c7c72 15446 libdbd-freetds-dbgsym_0.9.0-4_amd64.deb 69a74a0cd5ab977d9725c9b47fbc53711c88825b9564a27c59485a3311de4b04 17882 libdbd-freetds_0.9.0-4_amd64.deb 6e1a167c364ef5665713c00106efeba500b7e7124f7404c49c9120f987decc93 19090 libdbd-mysql-dbgsym_0.9.0-4_amd64.deb 41ec1ae5cc814b116ea12e9e8b793ec23d2fc106f0ac95acc70abc0bbb63ec86 151814 libdbd-mysql_0.9.0-4_amd64.deb fe5b50662263e75f58d2607ca1f44389713d5ba2849cf85d380a52d1cab93f11 17478 libdbd-pgsql-dbgsym_0.9.0-4_amd64.deb 823c99a8ea44a71ff4d6e687fb850b756ef8d285faeeb730ecb9838ce57ef24f 150236 libdbd-pgsql_0.9.0-4_amd64.deb 0cfd64ec08281da5c3a2f5ceb8a3adb01fcd0886638b1f05d97008e3e09cd82a 19810 libdbd-sqlite-dbgsym_0.9.0-4_amd64.deb 79d1cfec452f8e86e5f4d5341380f42cfae85acd4c5643fef761ab8eb43eeda3 24972 libdbd-sqlite3-dbgsym_0.9.0-4_amd64.deb c2f7f9c8529e353d270225fce58a7bc6e3a2a9acae4d92ce34fe85afe0123fb8 180114 libdbd-sqlite3_0.9.0-4_amd64.deb 026571fa78977992a644d07b6d9833c5273effec8e30fb230cfb663ba2c59c8f 178044 libdbd-sqlite_0.9.0-4_amd64.deb Files: 737bf46eb6ca5b86d00b45f7d7ac1cd9 2487 libs optional libdbi-drivers_0.9.0-4.dsc 05b329920059f8f18099fe7f9e23ba45 10404 libs optional libdbi-drivers_0.9.0-4.debian.tar.xz 5b1622e99943ed2c84a0849b5ecb6de4 15446 debug extra libdbd-freetds-dbgsym_0.9.0-4_amd64.deb 7d2bbb6021f29fdb73f94316cc28ae0e 17882 libs optional libdbd-freetds_0.9.0-4_amd64.deb 6991914dde54e3436b23fa64371bc94c 19090 debug extra libdbd-mysql-dbgsym_0.9.0-4_amd64.deb 97451855f01eb228c631ee4466af8122 151814 libs optional libdbd-mysql_0.9.0-4_amd64.deb 513ff6253dd596e4199b5dddfeef5dda 17478 debug extra libdbd-pgsql-dbgsym_0.9.0-4_amd64.deb 19d9dfc86a1c06a92caab0e614d46a4e 150236 libs optional libdbd-pgsql_0.9.0-4_amd64.deb 9de4b942451de8a7894ad22a5e3471f1 19810 debug extra libdbd-sqlite-dbgsym_0.9.0-4_amd64.deb 30bae1bac694033488f671abc34666eb 24972 debug extra libdbd-sqlite3-dbgsym_0.9.0-4_amd64.deb ba7fc40835db6e1b8e9e80dfce7883b0 180114 libs optional libdbd-sqlite3_0.9.0-4_amd64.deb f56a4a9a5db48c25c75d642626163d38 178044 libs optional libdbd-sqlite_0.9.0-4_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJXNLgpAAoJENzjEOeGTMi/5McP/isMIBUeXstDlTyVX3XJSfH3 icEzqOZXQCAY3fVAvpSxQGS8voCIZPry/tTnP9Vt+B5rtFcaedpoH5MXW2woukOo gXjQMpcMxcjrEtFa2JiNxZWRaFW1WVt871GPiTiu4/7nSav3kGAd3Knhde9IAdiM 2cyJ+3gt6hpo5FYBFvj6qUPxoOSH+ExR4vS2CvxRj8KWFkrf9WtFOk3kB+0LAl0w LEI7d9fU8Z4xQJP6JIKqlVG8thcSVvZkZ1itE7+MFgkIGpt+NT2VTcJFnQHGeK9o ERVFV3WBo4fDLCRl66C6G7rw/AdAFT1BjD/lWUsDajmgPXweYit4EMe9svEY+B0E DrbI48QPSxO/1pve+IHVXTkhUKlkh7sTS/kUcFEM1yTFTg2ADls/jcoWKXy2M74F XUgDwkT4YM4ilYc4Vm5oE1ZtatlPvECb9ZENkShU6wuQwH6PvfyAqAGINs/PBPyb e1ldFTuRGSQk906Wb8HVvRKIwanAZF8WAbEBJwEeYxNVZz/rr9Iu+ggS+7moXmue d2gKwMJNxRx51T/YHbvHuNhIzMwk/YtnDY6BK4MxtInp7OYvdlnX6egCiwqOGb6z dTORkMsjFQN/qsRHCrWZNK9UB0Gnrei5L6ITvVcOkGpWgv3YxNq0Wrj/WnNiWr5L yNmph0UZGImtwIYrJNtr =cHll -----END PGP SIGNATURE-----
--- End Message ---
