Your message dated Sun, 22 Nov 2020 08:49:07 +0000
with message-id <[email protected]>
and subject line Bug#975321: fixed in task-spooler 1.0+dfsg1-1
has caused the Debian Bug report #975321,
regarding task-spooler: buffer overflow when setting TMPDIR
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
975321: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=975321
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: task-spooler
Version: 1.0-1
Severity: normal
Dear Maintainer,
When the environment variable TMPDIR is set to a certain length,
invoking tsp
results in a buffer overflow that crashes the program. For instance:
$ echo $TMPDIR
/tmp/aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
$ tsp echo hello
*** buffer overflow detected ***: terminated
Abandon (core dumped)
The backtrace shows that the problem arises when creating the string
/tmp/aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/socket-
ts.1000
which is copied in a buffer that is too small:
#0 __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50
#1 0x00007f684ed84537 in __GI_abort () at abort.c:79
#2 0x00007f684eddd6c8 in __libc_message (action=action@entry=do_abort,
fmt=fmt@entry=0x7f684eeebc28 "*** %s ***: terminated\n") at
../sysdeps/posix/libc_fatal.c:155
#3 0x00007f684ee6c5b2 in __GI___fortify_fail (msg=msg@entry=0x7f684eeebbbe
"buffer overflow detected") at fortify_fail.c:26
#4 0x00007f684ee6afb0 in __GI___chk_fail () at chk_fail.c:28
#5 0x00007f684ee6a8b2 in __strcpy_chk (dest=0x7fff211a9592 "",
src=0x563601497500 "/tmp/", 'a' <repeats 88 times>, "/socket-ts.1000",
destlen=108) at strcpy_chk.c:30
#6 0x00005635ff7c891a in ?? ()
#7 0x00005635ff7c8a42 in ?? ()
#8 0x00005635ff7c6ce1 in ?? ()
#9 0x00007f684ed85cca in __libc_start_main (main=0x5635ff7c6b60, argc=3,
argv=0x7fff211a9818, init=<optimized out>, fini=<optimized out>,
rtld_fini=<optimized out>,
stack_end=0x7fff211a9808) at ../csu/libc-start.c:308
#10 0x00005635ff7c735a in ?? ()
-- System Information:
Debian Release: bullseye/sid
APT prefers testing
APT policy: (500, 'testing'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 5.9.0-2-amd64 (SMP w/4 CPU threads)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE
not set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages task-spooler depends on:
ii libc6 2.31-4
task-spooler recommends no packages.
task-spooler suggests no packages.
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: task-spooler
Source-Version: 1.0+dfsg1-1
Done: Alexander Inyukhin <[email protected]>
We believe that the bug you reported is fixed in the latest version of
task-spooler, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Alexander Inyukhin <[email protected]> (supplier of updated task-spooler
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 22 Nov 2020 10:31:41 +0300
Source: task-spooler
Architecture: source
Version: 1.0+dfsg1-1
Distribution: unstable
Urgency: medium
Maintainer: Alexander Inyukhin <[email protected]>
Changed-By: Alexander Inyukhin <[email protected]>
Closes: 975321
Changes:
task-spooler (1.0+dfsg1-1) unstable; urgency=medium
.
* Update Vcs-Git and Vcs-Browser fields in debian/control.
* Use https for copyright-format
* Add upstream metadata file
* Fix buffer overflow (closes: #975321)
* Update to standards version 4.5.0
* Exclude copyrighted material and unneeded files
* Upgrade watch file to version 4 and repack source
* New upstream version 1.0+dfsg1
* Use debhelper v13
Checksums-Sha1:
3c00eeed37965440c1e7994401960c52e8ece804 1890 task-spooler_1.0+dfsg1-1.dsc
214062230c68fac058cd1cde07a2c97fbd2a5cc9 40132
task-spooler_1.0+dfsg1.orig.tar.xz
8ee9c96d1cca5703468d4393005b181d2eafc1df 4468
task-spooler_1.0+dfsg1-1.debian.tar.xz
6e4306032bd32b23280640703ab624d1a3aada06 5602
task-spooler_1.0+dfsg1-1_source.buildinfo
Checksums-Sha256:
fcfd65ee86176580a81863e07107d73f33d8b987bf49a51ec6fc49038d227ac5 1890
task-spooler_1.0+dfsg1-1.dsc
6dbd21b8a2ddc937bf59acc4062e56953ef77b204d8213beb0f58308208c8bdd 40132
task-spooler_1.0+dfsg1.orig.tar.xz
3076ba492179b8ec273fa0e7dd75c49369d08bcbc0f0145ad7b7a4f8f6bd2610 4468
task-spooler_1.0+dfsg1-1.debian.tar.xz
ae6e23eeafddccac892502db3d980ec1a18d4d54a64777d4630048a463cbc64c 5602
task-spooler_1.0+dfsg1-1_source.buildinfo
Files:
f24cbdea78fbfed8ff554c631a941b97 1890 misc optional
task-spooler_1.0+dfsg1-1.dsc
1059a1f9f43f2df0991113b8c0726606 40132 misc optional
task-spooler_1.0+dfsg1.orig.tar.xz
ae50ace230312c6d96f5402e49751df8 4468 misc optional
task-spooler_1.0+dfsg1-1.debian.tar.xz
3601892b83b825982ec13be44206b602 5602 misc optional
task-spooler_1.0+dfsg1-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=hYIM
-----END PGP SIGNATURE-----
--- End Message ---
