Your message dated Sat, 25 Nov 2017 07:13:48 +0100
with message-id <[email protected]>
and subject line
has caused the Debian Bug report #614894,
regarding gtkterm: Buffer overflow in port specification
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
614894: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=614894
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: gtkterm
Version: 0.99.5-1
Severity: normal
The port, as either specified on the command line or via the GTK
dialog box, is copied into "config.port" using strcpy(). config.port
is defined as 64 characters. This not only corrupts memory, it means
that any path longer than 64 characters simply does not work as a
port:
gtkterm -s 115200 -p
/dev/serial/by-id/usb-NXP_SEMICOND_NXP_LPC13xx_VCOM_DEMO00000000-if00
gives errors:
Unknown speed : 812017965 bauds
Falling back to default speed : 9600 bauds
Impossible bits number : 48
Falling back to default stop bits : 8
Cannot open NXP_SEMICOND_NXP_LPC13xx_VCOM_DEMO00000000Ȁ% : No such file or
directory
At the very least, the size of port[] in src/config.h should be
changed from 64 to PATH_MAX or similar.
-jim
-- System Information:
Debian Release: 6.0
APT prefers testing
APT policy: (300, 'testing'), (50, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.38-rc6-amd64 (SMP w/2 CPU cores)
Locale: LANG=POSIX, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Versions of packages gtkterm depends on:
ii libatk1.0-0 1.30.0-1 The ATK accessibility toolkit
ii libc6 2.11.2-10 Embedded GNU C Library: Shared lib
ii libcairo2 1.8.10-6 The Cairo 2D vector graphics libra
ii libfontconfig1 2.8.0-2.1 generic font configuration library
ii libfreetype6 2.4.2-2.1 FreeType 2 font engine, shared lib
ii libglib2.0-0 2.24.2-1 The GLib library of C routines
ii libgtk2.0-0 2.20.1-2 The GTK+ graphical user interface
ii libpango1.0-0 1.28.3-1+squeeze1 Layout and rendering of internatio
ii libvte9 1:0.24.3-2 Terminal emulator widget for GTK+
ii libx11-6 2:1.3.3-4 X11 client-side library
gtkterm recommends no packages.
gtkterm suggests no packages.
-- no debconf information
--- End Message ---
--- Begin Message ---
version 0.99.7+git9d63182-1
--- End Message ---
