Your message dated Fri, 2 Aug 2019 16:19:05 +0300
with message-id <20190802131905.m6pzkmi3biyjgcyv@localhost>
and subject line Re: Bug#800943: libgcgi-dev: Crash in "multipart/formdata"
handling
has caused the Debian Bug report #800943,
regarding libgcgi-dev: Crash in "multipart/formdata" handling
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
800943: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=800943
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: libgcgi-dev
Severity: important
Tags: upstream
Dear Maintainer,
I have foudn a crashing bug inlibgcgi, when used with Ubuntu 14.04, compiling
with either gcc 4.84 or clang 3.4
The bug appears when handling form data with the multi/form-data encoding.
To demnstrate the bug, comiple from source on the target system, and try
running examples/gcgiFileUploadTest.
The programme will terminate with a segfault. I expect the same outcome on any
reasonably modern system.
Compiling with -O0 allows the application to run, but either -O1 or -O2 shows
the segfault.
The bug seems to be due to a mistake in src/mime.c, round line 442 in
mimeParseContentDescription. The line
for(q=text, *q != '\r' && q < offest; p++);
is clearly wrong, and should be
for(q=text; *q != '\r' && q < offset; q++);
The original leads to heap corruption, which casues a crash much later in
unrelated parts of the code.
I don't know if the defect is exploitable beyond denial of service.
I can provide a minimal patch (the one byte change above), and a more extensive
patch to clean up most of the
other compiler warnings from clang 3.4.
-- System Information:
Debian Release: jessie/sid
APT prefers trusty-updates
APT policy: (500, 'trusty-updates'), (500, 'trusty-security'), (500,
'trusty'), (100, 'trusty-backports')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 3.16.0-38-generic (SMP w/2 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
--- End Message ---
--- Begin Message ---
On Lu, 05 oct 15, 10:53:25, Julian Satchell wrote:
> Package: libgcgi-dev
> Severity: important
> Tags: upstream
Package was removed from Debian, see #710130.
Kind regards,
Andrei
--
Looking after bugs reported / filed against unknown packages
signature.asc
Description: PGP signature
--- End Message ---
