Package: elmo
Version: 1.3.0-1
Severity: normal

A little error in the source code might lead to segfault as found by
Chris Moore. 

confhold_close is called with -1 as an argument. Looking at
confhold_close, you see that will lead in negative indexing which could
overwrite some other data.

confhold_close (int cd)
{
     conf_table[cd].unused = 1;
}

             

--- elmo-1.3.0.orig/src/ask.c
+++ elmo-1.3.0/src/ask.c
@@ -143,7 +143,6 @@
 
          result->cd = confhold_open (name);
          if (result->cd == -1){
-                confhold_close (result->cd);
                 xfree (result);
                 return NULL;
          }


-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.15-13-386
Locale: LANG=fr_FR.utf8, LC_CTYPE=fr_FR.utf8 (charmap=UTF-8)

Versions of packages elmo depends on:
ii  libc6                         2.3.5-12   GNU C Library: Shared libraries an
ii  libgcc1                       1:4.0.2-7  GCC support library
ii  libgpg-error0                 1.1-4      library for common error values an
ii  libgpgme11                    1.1.0-1    GPGME - GnuPG Made Easy
ii  libssl0.9.7                   0.9.7g-5   SSL shared libraries
ii  libstdc++5                    1:3.3.6-12 The GNU Standard C++ Library v3

elmo recommends no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to