The patch has now been accepted by upstream and will be in the next release.
http://bugs.exim.org/show_bug.cgi?id=1287
I'm happy to include it in the debian package before that, and will do when I
get time in the next week.
On 2 Sep 2012, at 12:35, Patrick Häcker wrote:
> Package: libpcre3
> Version: 1:8.30-5
> Severity: grave
> Tags: patch
> Justification: causes non-serious data loss
>
> Dear Maintainer,
>
> when compiling the regular expression
>
> regex_t rx;
> regcomp(&rx, "^(\\(\\))? *(.*)$", 0)
>
> I get the large value 140733193388034 for rx.re_nsub. As this value is often
> used afterwards in malloc this normally leads to the termination of the
> programm (either because of the segfault or due to the assumption of no free
> memory), so unsaved data gets lost.
>
> The problem is well known
> (http://www.exim.org/lurker/message/20120822.143744.147fd5d2.de.html)
> and a patch exists (http://bugs.exim.org/attachment.cgi?id=586). I can
> confirm that the patch works.
>
> Please consider applying the patch.
>
> Cheers
> Patrick
>
> -- System Information:
> Debian Release: wheezy/sid
> APT prefers testing
> APT policy: (900, 'testing'), (500, 'testing-proposed-updates'), (500,
> 'stable-updates'), (400, 'unstable')
> Architecture: amd64 (x86_64)
>
> Kernel: Linux 3.2.0-3-amd64 (SMP w/6 CPU cores)
> Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
> Shell: /bin/sh linked to /bin/dash
>
> Versions of packages libpcre3 depends on:
> ii libc6 2.13-35
> ii multiarch-support 2.13-35
>
> libpcre3 recommends no packages.
>
> libpcre3 suggests no packages.
>
> -- no debconf information
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
