Your message dated Fri, 21 Apr 2017 21:48:50 +0000
with message-id <[email protected]>
and subject line Bug#775451: fixed in upx-ucl 3.93-1
has caused the Debian Bug report #775451,
regarding upx-ucl: failed assertions in upx_decompress
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
775451: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775451
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: upx-ucl
Version: 3.91-1
Usertags: afl
The attached files trigger assertion failures when upx is testing their
integrity:
$ upx -qqt assert150.elf
upx: compress.cpp:150: int upx_decompress(const unsigned char*, unsigned int,
unsigned char*, unsigned int*, int, const upx_compress_result_t*): Assertion
`src_len < *dst_len' failed.
Aborted
$ upx -qqt assert149.elf
upx: compress.cpp:149: int upx_decompress(const unsigned char*, unsigned int,
unsigned char*, unsigned int*, int, const upx_compress_result_t*): Assertion
`*dst_len > 0' failed.
Aborted
This bug was found using American fuzzy lop:
https://packages.debian.org/experimental/afl
-- System Information:
Debian Release: 8.0
APT prefers unstable
APT policy: (990, 'unstable'), (500, 'experimental')
Architecture: i386 (x86_64)
Foreign Architectures: amd64
Kernel: Linux 3.2.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=pl_PL.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)
Versions of packages upx-ucl depends on:
ii libc6 2.19-13
ii libgcc1 1:4.9.2-10
ii libstdc++6 4.9.2-10
ii libucl1 1.03+repack-2
ii zlib1g 1:1.2.8.dfsg-2+b1
--
Jakub Wilk
--- End Message ---
--- Begin Message ---
Source: upx-ucl
Source-Version: 3.93-1
We believe that the bug you reported is fixed in the latest version of
upx-ucl, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Robert Luberda <[email protected]> (supplier of updated upx-ucl package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Fri, 21 Apr 2017 23:08:52 +0200
Source: upx-ucl
Binary: upx-ucl
Architecture: source amd64
Version: 3.93-1
Distribution: experimental
Urgency: low
Maintainer: Robert Luberda <[email protected]>
Changed-By: Robert Luberda <[email protected]>
Description:
upx-ucl - efficient live-compressor for executables
Closes: 775451 775455 863694
Changes:
upx-ucl (3.93-1) experimental; urgency=low
.
* New upstream version:
+ contains fixes for failed assertions (closes: #775451) and segmentation
fault (closes: #775455).
* Upstream homepage was moved to github, update URLs in debian/watch,
debian/control and debian/copyright.
* Remove 00-Makefile.patch; override a few upstream Makefile's variables
in debian/rules instead.
* Remove 02-Lzma-support.patch together with build-dependency on lzma-dev
and Built-Using control field. Now upx is built with lzma sources included
by upstream in the upx source package.
* Drop 03-FTBFS-GCC6.patch, applied by upstream.
* Add 02-FTBFS-GCC7.patch that fixes the implicit fallthrough error reported
by g++-7 (closes: #863694; all other issues mentioned in the bug seem to
be fixed by upstream).
* Bump debhelper's compat level to 10.
* Update debian/copyright with lzma-sdk license details.
Checksums-Sha1:
62bb7b5f08728e9d3631f4eb3156a47b93bf6c40 1866 upx-ucl_3.93-1.dsc
34a89331461292e3062b17ace6cf80af552e1243 729264 upx-ucl_3.93.orig.tar.xz
b0523e9b6b102f16072bb8806e6559d70977bad5 12980 upx-ucl_3.93-1.debian.tar.xz
5783545a23055447b0e5dadd2aec0cdde3eb22c6 1199896
upx-ucl-dbgsym_3.93-1_amd64.deb
6518aa8138c0c190c81ae393d402353512ebce63 5676 upx-ucl_3.93-1_amd64.buildinfo
9cb5b74d6e3b85b42d868c6c10db57ca2d6a0bd4 367624 upx-ucl_3.93-1_amd64.deb
Checksums-Sha256:
4a497bd4c1d346a512964b048ce03974b97df30aca3080513459616c0d353628 1866
upx-ucl_3.93-1.dsc
893f1cf1580c8f0048a4d328474cb81d1a9bf9844410d2fd99f518ca41141007 729264
upx-ucl_3.93.orig.tar.xz
ba7672e6e8d22e7145010759ff488741d4021bec263d6e73d614bce60250a98f 12980
upx-ucl_3.93-1.debian.tar.xz
e8e00a12962a572a2fe5f5db05d0dc744a3d1ecbc6615f0a40d1fb4e1830b923 1199896
upx-ucl-dbgsym_3.93-1_amd64.deb
e17b6bc0537398ef0a86c516268fed4eaa51a181d4947399cecb45fc9bec6b84 5676
upx-ucl_3.93-1_amd64.buildinfo
19eea4dc479d62e2d81df2d90373af16a5095658ed91b7d298b39e3b80883dff 367624
upx-ucl_3.93-1_amd64.deb
Files:
2396b9c70ca1a80b4926ed88564ac8fc 1866 utils optional upx-ucl_3.93-1.dsc
d8da85311492a5f9e3a1fecc979f879b 729264 utils optional upx-ucl_3.93.orig.tar.xz
80dab7b9eab0364b829c2533deaa9704 12980 utils optional
upx-ucl_3.93-1.debian.tar.xz
421577b07a4e4f578468fc7177b05466 1199896 debug extra
upx-ucl-dbgsym_3.93-1_amd64.deb
c8997b397a5b390b1e4f37b751be21ed 5676 utils optional
upx-ucl_3.93-1_amd64.buildinfo
6805c25374bf66e599abb1f96e3fdfb8 367624 utils optional upx-ucl_3.93-1_amd64.deb
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCAAdFiEENeh2+rTTcy6TtNI3Yx3nVTvor9QFAlj6d0cACgkQYx3nVTvo
r9QmLw/7BTiFr/nczk0YoLTIzbOSgrMsVZl8pjZCXfKFKTZl3iFqVvbOL/z/RNFc
AFPh3DhJEKks1GuSNAieXeM1xi/9ntCNkjRCb0BTZc0M4eZyxRioy0ROOKn4Vedm
O/OQ755n/CAmhKd9ykoD0ZJu9SUKl4e5KO0Mq3oRk/wnSU7OzBQ3rR0MXraIZZAY
mgS6ZjH9bNsJjPKEToyAJEyLQiF90urStg4ad9QryJndQ/AIs1muKRYPBvXl7hWw
K9b6CxEp1LF4wIEJVhydtHCGgEFP5got5r9aVqL0kguU+PyfCF6ibDCalgX7peGa
62Bc0NvBbLd/BeEHLCISjleU1FTf6gxhuWNVEq86cc7dci9v9khxMirWCUiIj5jh
qj/HBDzaODQmOfq55zzDz72I7eIVdQbq5D3cPjMe58uhweECUvVp9W8f4xAdwjBF
BnFEBzFNv5+JeXctYw3B+aMNlYDcb6QqaYAjdiiI9xxDGmoGXZBQ6eFf3wJkQI1H
Blr8OOraqs/WdFTqeSeJ0djukJW5ubOKGFi9+1XYGjrp63xR/LRhAif7CftU2NS9
cwjwvpktGj8PNcz+ktT2VPYR2lVwAuTs7f30X1rVytSVTn8yXBN7l21z3hsJ2gtm
EmBJr9UpIVvrGb5ABfe5Yd+Q5umrFK7muGzelxHg3E6C9aL1qdE=
=WWfy
-----END PGP SIGNATURE-----
--- End Message ---
