Package: collectd-core
Version: 4.10.1-1+squeeze2
Severity: normal

When "notify_email" plugin is used, and if a configuration option for it
is not OK, collectd crashes. Example of a wrong configuration:

LoadPlugin notify_email

<Plugin notify_email>
   From       collectd@host
   Recipient  admin@host
</Plugin>

The problem is that the values should be surrounded by quotes, however
this seems to be ignored and then the value becomes "collectd host",
and as a result an error occurs when collectd tries to use this as
a valid email address.

I am not sure what the upstream's idea of a proper fix is, so no
patch is attached, but I believe I have included enough information
so they can fix this easily.

The crash occurs in:

notify_email.c, function "print_recipient_status":

  if (status->text[strlen(status->text) - 2] == '\r')
    status->text[strlen(status->text) - 2] = 0;

Here "status->text" is a NULL pointer so a check needs to be added
to guard against it, or even better, a warning should be generated
when parsing a config file.


-- System Information:
Debian Release: 6.0.1
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-5-686 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages collectd-core depends on:
ii  debconf [debconf-2.0]         1.5.36.1   Debian configuration management sy
ii  libc6                         2.11.2-10  Embedded GNU C Library: Shared lib
ii  libltdl7                      2.2.6b-2   A system independent dlopen wrappe

Versions of packages collectd-core recommends:
ii  perl                          5.10.1-17  Larry Wall's Practical Extraction
pn  rrdtool                       <none>     (no description available)

Versions of packages collectd-core suggests:
pn  apache2                 <none>           (no description available)
pn  apcupsd                 <none>           (no description available)
pn  bind9                   <none>           (no description available)
pn  collectd-dev            <none>           (no description available)
ii  hddtemp                 0.3-beta15-46    hard drive temperature monitoring
pn  httpd-cgi               <none>           (no description available)
ii  iptables                1.4.8-3          administration tools for packet fi
pn  ipvsadm                 <none>           (no description available)
pn  libatk1.0-0             <none>           (no description available)
ii  libc6                   2.11.2-10        Embedded GNU C Library: Shared lib
pn  libcairo2               <none>           (no description available)
pn  libconfig-general-perl  <none>           (no description available)
ii  libcurl3-gnutls         7.21.0-1         Multi-protocol file transfer libra
pn  libdbi0                 <none>           (no description available)
pn  libdbus-1-3             <none>           (no description available)
pn  libdbus-glib-1-2        <none>           (no description available)
ii  libesmtp5               1.0.4-5          LibESMTP SMTP client library
pn  libfontconfig1          <none>           (no description available)
ii  libfreetype6            2.4.2-2.1        FreeType 2 font engine, shared lib
ii  libgcrypt11             1.4.5-2          LGPL Crypto library - runtime libr
ii  libglib2.0-0            2.24.2-1         The GLib library of C routines
pn  libgtk2.0-0             <none>           (no description available)
pn  libhal1                 <none>           (no description available)
pn  libhtml-parser-perl     <none>           (no description available)
pn  libmemcached5           <none>           (no description available)
pn  libmysqlclient16        <none>           (no description available)
pn  libnotify1              <none>           (no description available)
pn  libnotify1-gtk2.10      <none>           (no description available)
pn  libopenipmi0            <none>           (no description available)
pn  liboping0               <none>           (no description available)
pn  libpango1.0-0           <none>           (no description available)
ii  libpcap0.8              1.1.1-2          system interface for user-level pa
pn  libperl5.10             <none>           (no description available)
pn  libpq5                  <none>           (no description available)
pn  libprotobuf-c0          <none>           (no description available)
ii  libpython2.6            2.6.6-8+b1       Shared Python runtime library (ver
pn  libregexp-common-perl   <none>           (no description available)
pn  librrd4                 <none>           (no description available)
pn  librrds-perl            <none>           (no description available)
ii  libsensors4             1:3.1.2-6        library to read temperature/voltag
pn  libsnmp15               <none>           (no description available)
ii  libssl0.9.8             0.9.8o-4squeeze1 SSL shared libraries
pn  libtokyotyrant3         <none>           (no description available)
pn  libupsclient1           <none>           (no description available)
pn  liburi-perl             <none>           (no description available)
pn  libvirt0                <none>           (no description available)
ii  libxml2                 2.7.8.dfsg-2     GNOME XML library
pn  libyajl1                <none>           (no description available)
ii  lm-sensors              1:3.1.2-6        utilities to read temperature/volt
pn  mbmon                   <none>           (no description available)
pn  memcached               <none>           (no description available)
pn  mysql-server            <none>           (no description available)
pn  nginx                   <none>           (no description available)
pn  notification-daemon     <none>           (no description available)
pn  nut                     <none>           (no description available)
pn  olsrd                   <none>           (no description available)
pn  openvpn                 <none>           (no description available)
pn  pdns-server             <none>           (no description available)
pn  postgresql              <none>           (no description available)
pn  time-daemon             <none>           (no description available)

-- Configuration Files:
/etc/default/collectd changed:
DISABLE=0
USE_COLLECTDMON=0
MAXWAIT=30
ENABLE_COREFILES=0


-- debconf information:
  collectd/auto-migrate-3-4: false
  collectd/migration-3-4:



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to