Your message dated Wed, 27 Dec 2017 09:06:03 +0000
with message-id <[email protected]>
and subject line Bug#871722: fixed in unalz 0.65-6
has caused the Debian Bug report #871722,
regarding unalz: null pointer dereference
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
871722: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=871722
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: unalz
Version: 0.65-5
unalz crashes on this file:
$ printf 'ALZ\1' > crash.alz
$ unalz -l crash.alz
unalz v0.65 (2009/04/01)
Copyright(C) 2004-2009 by [email protected] (http://www.kipple.pe.kr)
Segmentation fault
Valgrind says it's a null pointer dereference:
Invalid read of size 4
at 0x4ACE446: fread (iofread.c:37)
by 0x10AA67: UNALZ::CUnAlz::FRead(void*, unsigned int, int*)
(UnAlz.cpp:1649)
by 0x10ACE4: UNALZ::CUnAlz::ReadAlzFileHeader() (UnAlz.cpp:381)
by 0x10C72C: UNALZ::CUnAlz::Open(char const*) (UnAlz.cpp:309)
by 0x109431: main (main.cpp:290)
Address 0x0 is not stack'd, malloc'd or (recently) free'd
Found using American Fuzzy Lop:
http://lcamtuf.coredump.cx/afl/
-- System Information:
Architecture: i386
Versions of packages unalz depends on:
ii libbz2-1.0 1.0.6-8.1
ii libc6 2.24-14
ii libgcc1 1:7.1.0-13
ii libstdc++6 7.1.0-13
ii zlib1g 1:1.2.8.dfsg-5
--
Jakub Wilk
--- End Message ---
--- Begin Message ---
Source: unalz
Source-Version: 0.65-6
We believe that the bug you reported is fixed in the latest version of
unalz, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Changwoo Ryu <[email protected]> (supplier of updated unalz package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 27 Dec 2017 17:38:44 +0900
Source: unalz
Binary: unalz
Architecture: source
Version: 0.65-6
Distribution: unstable
Urgency: medium
Maintainer: Debian Korean L10N <[email protected]>
Changed-By: Changwoo Ryu <[email protected]>
Description:
unalz - De-archiver for .alz files
Closes: 871722
Changes:
unalz (0.65-6) unstable; urgency=medium
.
* debian/{control,copyright,watch}: Correct the upstream URL
* debian/control:
- l10n-korean team is set as the Maintainer
- Update Vcs-* to the salsa.debian.org repository
- Standards-Version: 4.1.2
* debian/{compat,control}: Use debhelper 10
* patch: Fix file offset overflow on incomplete files (Closes: #871722)
Checksums-Sha1:
9bef71821b51d4925ebfff03a9950dd8c2112b30 1942 unalz_0.65-6.dsc
ed0012be5f0ecb89773d64f92403e0b52141d06a 8420 unalz_0.65-6.debian.tar.xz
c3d81546fb1501af2d256967702487cda468143b 5610 unalz_0.65-6_source.buildinfo
Checksums-Sha256:
3a583df48cc6e13112495dc21dff9eccc21c3104f18e4debd15cc0723b96f884 1942
unalz_0.65-6.dsc
57597298c9d7ab8c67a664d484a056943f4aa43442de9a77d700eab94f39874a 8420
unalz_0.65-6.debian.tar.xz
40e7e7d009c3ee5b0e097de38064a652d8095c0b1d0f44c813d2e3723a11e7f3 5610
unalz_0.65-6_source.buildinfo
Files:
60e99abbc1a061e9e7e5207b76b23294 1942 utils optional unalz_0.65-6.dsc
bf82b6d7cd62025c0689f5df18cab0cc 8420 utils optional unalz_0.65-6.debian.tar.xz
66464544ce32cab73cdccf9b2e4b79e4 5610 utils optional
unalz_0.65-6_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=/Mcs
-----END PGP SIGNATURE-----
--- End Message ---
