Control: reopen -1 Hi!
On Thu, 2014-07-31 at 19:06:18 +0000, Debian Bug Tracking System wrote: > Changes: > cdebootstrap (0.6.3) unstable; urgency=medium > . […] > * Supprt large deb packages. (closes: #756419) Thanks for the prompt fix. Although it seems there's at least one omission… > From: Guillem Jover <guil...@debian.org> > To: sub...@bugs.debian.org > Subject: cdebootstrap: Does not support large .deb packages > Package: cdebootstrap > Version: 0.6.2 > Severity: normal > Tags: lfs > This package does not have .deb LFS [L]. Through code staring I can see > at least src/package.c:package_extract_self() which stores the memberlen > in a ssize_t variable. package_extract_self_parse_header_length() > would also truncate the value (long, strtoul()), along with all > package_extract_self_FOO() which only take a size_t argument. And the > decompress_FOO() and struct decompress_FOO len members. … as mentioned above, the strtoul() and «long r» local variable in package_extract_self_parse_header_length() will truncate large file sizes. Thanks, Guillem -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
