Package: checkinstall
Version: 1.6.2-4
Severity: grave
Tags: patch upstream
Justification: renders package unusable

Dear Maintainer,

in installwatch.c, _xstat64() is missing check for initialization

As a consequence of this, if `__xstat64()` is the first function called from
the library, then no initalization is performed and the program segfaults when
trying to call `true_xstat64()` which is uninitialized

This causes a segmentation fault on Debian Stretch when invoking e.g.:
`checkinstall cmake -P cmake_install.cmake`

I filed the bug upstream: https://bugtrack.izto.org:4442/show_bug.cgi?id=171

Patch:

diff --git a/installwatch/installwatch.c b/installwatch/installwatch.c
index 8e6c616..51493b1 100644
--- a/installwatch/installwatch.c
+++ b/installwatch/installwatch.c
@@ -3746,6 +3746,9 @@ int __xstat64(int version,const char *pathname,struct
stat64 *info) {
        instw_t instw;
        int status;

+       if (!libc_handle)
+           initialize();
+
 #if DEBUG
        debug(2,"stat64(%s,%p)\n",pathname,info);
 #endif


-- System Information:
Debian Release: 9.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: armhf (armv7l)

Kernel: Linux 4.4.87-ti-xenomai-r121 (PREEMPT)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages checkinstall depends on:
ii  dpkg-dev  1.18.24
ii  file      1:5.30-1
ii  libc6     2.24-11

Versions of packages checkinstall recommends:
ii  make  4.1-9.1

Versions of packages checkinstall suggests:
ii  gettext  0.19.8.1-2

-- no debconf information

Reply via email to