Your message dated Sun, 09 Jul 2006 01:15:33 +0200
with message-id <[EMAIL PROTECTED]>
and subject line Bug#284020: fixed in hypermail 2.2.0-1
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--- Begin Message ---
Subject: hypermail: crashes when updating archives with "%n%n%n%n%n"
Package: hypermail
Version: 2.1.8-1
Severity: normal
Tags: patch
*** Please type your report below this line ***
Hello,
I have found two format string bugs in Hypermail. They could cause crashes
if using incremental mode on edited pre-existing archives with data like
"%n%n%n%n%n%n%n%n" in certain lines. (OK, that is unlikely to happen very
often in real life, but the program shouldn't crash anyway.) Here's a session
capture that shows this problem:
$ tar zxvf ~/metaur.tar.gz
metaur/
metaur/0000.html
metaur/0001.html
metaur/0002.html
metaur/date.html
metaur/index.html
metaur/subject.html
metaur/author.html
metaur/attachment.html
$ hypermail -o increment=1 -m ~/metaur
WARNING: locale "en_US", not supported.
Segmentation fault
$
(The files metaur and metaur.tar.gz have been attached.)
The bugs are caused by using data from an archive as the format string in
fprintf() calls, instead of using "%s" as the format string and the data
as parameters.
I have attached a patch against 2.2.0 upstream (applies to the Debian version
as well) that fixes both bugs.
I have already told upstream about the bugs.
// Ulf Harnhammar
http://www.advogato.org/person/metaur/
-- System Information:
Debian Release: 3.1
APT prefers testing
APT policy: (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.4.27-1-686
Locale: LANG=en_GB, LC_CTYPE=en_GB (charmap=ISO-8859-1)
Versions of packages hypermail depends on:
ii libc6 2.3.2.ds1-18 GNU C Library: Shared libraries an
ii libgdbm3 1.8.3-2 GNU dbm database routines (runtime
ii libpcre3 4.5-1.1 Perl 5 Compatible Regular Expressi
-- no debconf information
--- src/parse.c.old 2004-05-25 03:38:08.000000000 +0200
+++ src/parse.c 2004-12-02 19:17:28.000000000 +0100
@@ -3678,7 +3678,7 @@ void fixreplyheader(char *dir, int num,
}
if (!strncmp(bp->line, " [ ", 22)) {
list_started = TRUE;
- fprintf (fp, bp->line);
+ fprintf (fp, "%s", bp->line);
bp = bp->next;
continue;
}
@@ -3686,7 +3686,7 @@ void fixreplyheader(char *dir, int num,
if (list_started == FALSE)
fprintf (fp, " [ %s ]\n",
lang[MSG_REPLIES]);
- fprintf (fp, bp->line);
+ fprintf (fp, "%s", bp->line);
bp = bp->next;
continue;
}
From [EMAIL PROTECTED] Fri Nov 26 00:22:55 2004
Return-path: <[EMAIL PROTECTED]>
Envelope-to: [EMAIL PROTECTED]
Delivery-date: Fri, 26 Nov 2004 00:22:55 +0100
Received: from metaur by localhost with local (Exim 4.34)
id 1CXSwx-0007W5-Cv
for [EMAIL PROTECTED]; Fri, 26 Nov 2004 00:22:55 +0100
Date: Fri, 26 Nov 2004 00:22:55 +0100
To: [EMAIL PROTECTED]
Subject: Hypermail
Message-ID: <[EMAIL PROTECTED]>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.5.6+20040722i
From: Ulf Harnhammar <[EMAIL PROTECTED]>
Status: RO
X-Status: A
Content-Length: 15
Lines: 1
Hypermail test
From [EMAIL PROTECTED] Fri Nov 26 00:23:12 2004
Return-path: <[EMAIL PROTECTED]>
Envelope-to: [EMAIL PROTECTED]
Delivery-date: Fri, 26 Nov 2004 00:23:12 +0100
Received: from metaur by localhost with local (Exim 4.34)
id 1CXSxE-0007XC-21
for [EMAIL PROTECTED]; Fri, 26 Nov 2004 00:23:12 +0100
Date: Fri, 26 Nov 2004 00:23:12 +0100
To: [EMAIL PROTECTED]
Subject: Re: Hypermail
Message-ID: <[EMAIL PROTECTED]>
References: <[EMAIL PROTECTED]>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <[EMAIL PROTECTED]>
User-Agent: Mutt/1.5.6+20040722i
From: Ulf Harnhammar <[EMAIL PROTECTED]>
Status: RO
X-Status: A
Content-Length: 124
Lines: 4
Reply to hypermail test (don't top post!)
On Fri, Nov 26, 2004 at 12:22:55AM +0100, Ulf Harnhammar wrote:
> Hypermail test
From [EMAIL PROTECTED] Fri Nov 26 00:23:26 2004
Return-path: <[EMAIL PROTECTED]>
Envelope-to: [EMAIL PROTECTED]
Delivery-date: Fri, 26 Nov 2004 00:23:26 +0100
Received: from metaur by localhost with local (Exim 4.34)
id 1CXSxS-0007XJ-N7
for [EMAIL PROTECTED]; Fri, 26 Nov 2004 00:23:26 +0100
Date: Fri, 26 Nov 2004 00:23:26 +0100
To: [EMAIL PROTECTED]
Subject: Re: Hypermail
Message-ID: <[EMAIL PROTECTED]>
References: <[EMAIL PROTECTED]> <[EMAIL PROTECTED]>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <[EMAIL PROTECTED]>
User-Agent: Mutt/1.5.6+20040722i
From: Ulf Harnhammar <[EMAIL PROTECTED]>
Status: RO
Content-Length: 226
Lines: 7
On Fri, Nov 26, 2004 at 12:23:12AM +0100, Ulf Harnhammar wrote:
> Reply to hypermail test (don't top post!)
>
> On Fri, Nov 26, 2004 at 12:22:55AM +0100, Ulf Harnhammar wrote:
> > Hypermail test
Why do you have to top post?
From [EMAIL PROTECTED] Fri Nov 26 00:24:29 2004
Return-path: <[EMAIL PROTECTED]>
Envelope-to: [EMAIL PROTECTED]
Delivery-date: Fri, 26 Nov 2004 00:24:29 +0100
Received: from metaur by localhost with local (Exim 4.34)
id 1CXSyT-0007Xk-12
for [EMAIL PROTECTED]; Fri, 26 Nov 2004 00:24:29 +0100
Date: Fri, 26 Nov 2004 00:24:28 +0100
To: [EMAIL PROTECTED]
Subject: Re: Hypermail
Message-ID: <[EMAIL PROTECTED]>
References: <[EMAIL PROTECTED]> <[EMAIL PROTECTED]>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <[EMAIL PROTECTED]>
User-Agent: Mutt/1.5.6+20040722i
From: Ulf Harnhammar <[EMAIL PROTECTED]>
Status: RO
Content-Length: 10
Lines: 1
blah blah
From [EMAIL PROTECTED] Fri Nov 26 00:24:42 2004
Return-path: <[EMAIL PROTECTED]>
Envelope-to: [EMAIL PROTECTED]
Delivery-date: Fri, 26 Nov 2004 00:24:42 +0100
Received: from metaur by localhost with local (Exim 4.34)
id 1CXSyg-0007Xr-58
for [EMAIL PROTECTED]; Fri, 26 Nov 2004 00:24:42 +0100
Date: Fri, 26 Nov 2004 00:24:42 +0100
To: [EMAIL PROTECTED]
Subject: Re: Hypermail
Message-ID: <[EMAIL PROTECTED]>
References: <[EMAIL PROTECTED]>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <[EMAIL PROTECTED]>
User-Agent: Mutt/1.5.6+20040722i
From: Ulf Harnhammar <[EMAIL PROTECTED]>
Status: RO
Content-Length: 92
Lines: 4
yada yada
On Fri, Nov 26, 2004 at 12:22:55AM +0100, Ulf Harnhammar wrote:
> Hypermail test
metaur.tar.gz
Description: application/gzip-compressed
--- End Message ---
--- Begin Message ---
Source: hypermail
Source-Version: 2.2.0-1
We believe that the bug you reported is fixed in the latest version of
hypermail, which is due to be installed in the Debian FTP archive:
hypermail_2.2.0-1.diff.gz
to pool/main/h/hypermail/hypermail_2.2.0-1.diff.gz
hypermail_2.2.0-1.dsc
to pool/main/h/hypermail/hypermail_2.2.0-1.dsc
hypermail_2.2.0-1_i386.deb
to pool/main/h/hypermail/hypermail_2.2.0-1_i386.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Jan Christoph Nordholz <[EMAIL PROTECTED]> (supplier of updated hypermail
package)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Sun, 04 Jun 2006 01:50:59 +0200
Source: hypermail
Binary: hypermail
Architecture: source i386
Version: 2.2.0-1
Distribution: unstable
Urgency: low
Maintainer: Jan Christoph Nordholz <[EMAIL PROTECTED]>
Changed-By: Jan Christoph Nordholz <[EMAIL PROTECTED]>
Description:
hypermail - Create HTML archives of mailing lists
Changes:
hypermail (2.2.0-1) unstable; urgency=low
.
* New (sponsored) maintainer, closes #364616.
* New upstream release, taken from the sourceforge project
website. All other upstream sources seem dead.
Updated upstream info in copyright file.
Closes #341764, #319693, #280155.
* Switched debhelper compat level from 1 to 5. Removed
a few obsolete calls from debian/rules.
* Manually updated config.sub/config.guess. Should fix
#342432.
* Fixed crash caused by format string incautiousness, thanks
to Ulf Härnhammar for reporting - closes #284020.
* Corrected section of hmrc manpage, closes #172478.
* Replaced obsolete needs=dwww menu file with the proper
doc-base magic.
* Made a few minor fixes to hmrc(5) and hypermail(1) to
make GNU troff (and thus lintian) happy.
* Converted changelog file to UTF-8, and removed the
closes= part from a few entries' header lines.
* Bumped Standards-Version to 3.7.2.0.
Files:
f6b715d6e7e70f83632a8f2babf2bfd2 623 web optional hypermail_2.2.0-1.dsc
a064e36780ee41409c8c973f9c69927f 1256316 web optional
hypermail_2.2.0.orig.tar.gz
66dc4a3abbabe41dc6c82b61be4d3c84 72947 web optional hypermail_2.2.0-1.diff.gz
1822b1c7e2d7040eec7e75e70a5e4042 268684 web optional hypermail_2.2.0-1_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)
iD8DBQFErbroKNPoKRflcycRAsRvAKCXh1xJDnjUXqpeiUyxv6DbJ9loagCePzYg
CVvNOCrjb4YvJ+bnRNtXL2M=
=F2g/
-----END PGP SIGNATURE-----
--- End Message ---
