Your message dated Tue, 13 Feb 2018 23:21:26 +0000
with message-id <e1eljt8-0005kr...@fasolo.debian.org>
and subject line Bug#869777: fixed in yara 3.7.1-2
has caused the Debian Bug report #869777,
regarding yara tests fail on ARM32, when run on a 64bit kernel
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
869777: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=869777
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: src:yara
Version: 3.6.3+dfsg-1
Forwarded: https://github.com/VirusTotal/yara/issues/716
Tags: upstream

yara tests fail on ARM32, when run on a 64bit kernel.

This turns out to be because the codebase is full of code that assumes unaligned
access is OK, for example stuff like this
https://github.com/VirusTotal/yara/blob/master/libyara/exec.c#L224 but also
more subtly stuff like
https://github.com/VirusTotal/yara/blob/master/libyara/scan.c#L409
(new_match is only guaranteed to be 4-byte-aligned and crashes when you access
an 8 byte field).

make  check-TESTS
make[3]: Entering directory '/<<BUILDDIR>>/yara-3.6.3+dfsg'
make[4]: Entering directory '/<<BUILDDIR>>/yara-3.6.3+dfsg'
PASS: test-alignment
FAIL: test-rules
FAIL: test-pe
FAIL: test-elf
PASS: test-version
FAIL: test-exception
==================================
   yara 3.6.3: ./test-suite.log
==================================

# TOTAL: 6
# PASS:  2
# SKIP:  0
# XFAIL: 0
# FAIL:  4
# XPASS: 0
# ERROR: 0

.. contents:: :depth: 2

FAIL: test-rules
================

yr_rules_scan_mem: error
FAIL test-rules (exit status: 1)

FAIL: test-pe
=============

yr_rules_scan_mem: error
FAIL test-pe (exit status: 1)

FAIL: test-elf
==============

yr_rules_scan_mem: error
FAIL test-elf (exit status: 1)

FAIL: test-exception
====================

Scanning for "aaaa"...
err = 4, matches = 0
Sending blocked SIGUSR1 to ourselves...
Scanning for {00 00 00 00}...
err = 4, matches = 0
Scanning for "aaaa"...
err = 4, matches = 0
Expected subprocess to be terminated by signal
Test: crash
Test: crash-no-handle
Test: blocked-signal
Test: crash-other-thread
FAIL test-exception (exit status: 1)

============================================================================
Testsuite summary for yara 3.6.3
============================================================================
# TOTAL: 6
# PASS:  2
# SKIP:  0
# XFAIL: 0
# FAIL:  4
# XPASS: 0
# ERROR: 0
============================================================================
See ./test-suite.log
Please report to vmalva...@virustotal.com
============================================================================
Makefile:1000: recipe for target 'test-suite.log' failed
make[4]: *** [test-suite.log] Error 1

--- End Message ---
--- Begin Message ---
Source: yara
Source-Version: 3.7.1-2

We believe that the bug you reported is fixed in the latest version of
yara, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 869...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Hilko Bengen <ben...@debian.org> (supplier of updated yara package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Tue, 13 Feb 2018 23:27:11 +0100
Source: yara
Binary: yara libyara3 libyara-dev yara-doc
Architecture: source
Version: 3.7.1-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Forensics <forensics-de...@lists.alioth.debian.org>
Changed-By: Hilko Bengen <ben...@debian.org>
Description:
 libyara-dev - YARA development libraries and headers
 libyara3   - YARA shared library
 yara       - Pattern matching swiss knife for malware researchers
 yara-doc   - HTML documentation for YARA
Closes: 869777
Changes:
 yara (3.7.1-2) unstable; urgency=medium
 .
   * Fix unaligned access that leads to failing tests. Thanks to Matthias
     Klose for the patch. (Closes: #869777)
Checksums-Sha1:
 b3a2ddee28377f924fec10ee9cfd14b1e149280f 2104 yara_3.7.1-2.dsc
 d692dac21def535b4e0beb949cb01d8852dfe109 7880 yara_3.7.1-2.debian.tar.xz
 eb6fc1a98b22b0079b51eff92222120abe733d38 4086 yara_3.7.1-2_source.buildinfo
Checksums-Sha256:
 390adba34dc539b856274c4bbc7b37aec58840b7e95916b59f13fbc3a791653f 2104 
yara_3.7.1-2.dsc
 447439a9f1fca3801a2d9a58cd73becce14494505b4efdf1ae5e227c08050856 7880 
yara_3.7.1-2.debian.tar.xz
 f0a819fbddfed093969ea004bd8fb19bb31e5b230d76f777cdddfd3cfef98dc8 4086 
yara_3.7.1-2_source.buildinfo
Files:
 48d13e68da13d529d5445f5846600b34 2104 utils optional yara_3.7.1-2.dsc
 8092dc8cd711d584ac33d6c0bef0c041 7880 utils optional yara_3.7.1-2.debian.tar.xz
 263a8aaf96c8533d9a791d722e2c3520 4086 utils optional 
yara_3.7.1-2_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=kLY6
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to