Package: tnef Version: 1.4.9-1+deb8u1 Severity: normal
Afer security update to version 1.4.9-+deb8u1 tnef is unable to extract file that was working before update. I'm using command(file attached): tnef --list /tmp/winmail.dat-c8BSWz and i get(strace attached): tnef: mapi_attr.c:233: mapi_attr_read: Assertion `(idx+(a->names[i].len*2)) <= len' failed. Przerwane After downgrading to version thef-1.4.9-1 extraction works fine. -- System Information: Debian Release: 8.7 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.9.0-040900-generic (SMP w/4 CPU cores) Locale: LANG=pl_PL.UTF-8, LC_CTYPE=pl_PL.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to pl_PL.UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages tnef depends on: ii libc6 2.19-18+deb8u7 Versions of packages tnef recommends: ii mime-support 3.58 tnef suggests no packages. -- no debconf information
winmail.dat-c8BSWz
Description: Binary data
2977 execve("/usr/bin/tnef", ["tnef", "--list", "/tmp/winmail.dat-c8BSWz"],
[/* 15 vars */]) = 0
2977 brk(0) = 0x1643000
2977 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
2977 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
= 0x7fe444260000
2977 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
2977 open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
2977 fstat(3, {st_mode=S_IFREG|0644, st_size=37190, ...}) = 0
2977 mmap(NULL, 37190, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fe444256000
2977 close(3) = 0
2977 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
2977 open("/lib/x86_64-linux-gnu/libc.so.6", O_RDONLY|O_CLOEXEC) = 3
2977 read(3,
"\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0P\34\2\0\0\0\0\0"..., 832) = 832
2977 fstat(3, {st_mode=S_IFREG|0755, st_size=1738176, ...}) = 0
2977 mmap(NULL, 3844640, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0)
= 0x7fe443c97000
2977 mprotect(0x7fe443e38000, 2097152, PROT_NONE) = 0
2977 mmap(0x7fe444038000, 24576, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1a1000) = 0x7fe444038000
2977 mmap(0x7fe44403e000, 14880, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fe44403e000
2977 close(3) = 0
2977 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
= 0x7fe444255000
2977 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
= 0x7fe444254000
2977 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
= 0x7fe444253000
2977 arch_prctl(ARCH_SET_FS, 0x7fe444254700) = 0
2977 mprotect(0x7fe444038000, 16384, PROT_READ) = 0
2977 mprotect(0x7fe444262000, 4096, PROT_READ) = 0
2977 munmap(0x7fe444256000, 37190) = 0
2977 brk(0) = 0x1643000
2977 brk(0x1664000) = 0x1664000
2977 open("/tmp/winmail.dat-c8BSWz", O_RDONLY) = 3
2977 fstat(3, {st_mode=S_IFREG|0666, st_size=38632, ...}) = 0
2977 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
= 0x7fe44425f000
2977 read(3,
"x\237>\"\354i\1\6\220\10\0\4\0\0\0\0\0\1\0\1\0\1\7\220\6\0\10\0\0\0\344\4"...,
4096) = 4096
2977 fstat(3, {st_mode=S_IFREG|0666, st_size=38632, ...}) = 0
2977 lseek(3, 0, SEEK_CUR) = 4096
2977 fstat(3, {st_mode=S_IFREG|0666, st_size=38632, ...}) = 0
2977 fstat(3, {st_mode=S_IFREG|0666, st_size=38632, ...}) = 0
2977 fstat(3, {st_mode=S_IFREG|0666, st_size=38632, ...}) = 0
2977 fstat(3, {st_mode=S_IFREG|0666, st_size=38632, ...}) = 0
2977 fstat(3, {st_mode=S_IFREG|0666, st_size=38632, ...}) = 0
2977 fstat(3, {st_mode=S_IFREG|0666, st_size=38632, ...}) = 0
2977 fstat(3, {st_mode=S_IFREG|0666, st_size=38632, ...}) = 0
2977 fstat(3, {st_mode=S_IFREG|0666, st_size=38632, ...}) = 0
2977 read(3, "></o:p></span></p><p class=MsoNo"..., 4096) = 4096
2977 read(3,
"\0\0\0\0F\0\0\0\0\6\205\0\0\0\0\0\0\37\0007\0\1\0\0\0\216\0\0\0R\0E"..., 4096)
= 4096
2977 write(2, "tnef: mapi_attr.c:233: mapi_attr"..., 92) = 92
2977 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
= 0x7fe44425e000
2977 rt_sigprocmask(SIG_UNBLOCK, [ABRT], NULL, 8) = 0
2977 gettid() = 2977
2977 tgkill(2977, 2977, SIGABRT) = 0
2977 --- SIGABRT {si_signo=SIGABRT, si_code=SI_TKILL, si_pid=2977, si_uid=0}
---
2977 +++ killed by SIGABRT (core dumped) +++
