Your message dated Mon, 15 Dec 2014 06:48:56 +0000
with message-id <[email protected]>
and subject line Bug#772005: fixed in libdevice-cdio-perl 0.3.0-3
has caused the Debian Bug report #772005,
regarding libdevice-cdio-perl: Debian patch causes Perl crashes in
Device::Cdio::ISO9660::IFS's readdir: "Error in `/usr/bin/perl': realloc():
invalid next size: 0x0000000001f05850"
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
772005: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=772005
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: libdevice-cdio-perl
Version: 0.3.0-2+b2
Severity: serious
X-Debbugs-Cc: [email protected]
Hi,
(Tentatively flagging as RC as this regression breaks Tails software
that worked just fine on Wheezy. If other team members disagree, then
feel free to downgrade severity.)
The reproducer script that follows, when passed the path to Tails'
1.2.1 ISO
(http://dl.amnesia.boum.org/tails/stable/tails-i386-1.2.1/tails-i386-1.2.1.iso),
reliably crashes the interpreter with:
before readdir EFI
after readdir EFI
before readdir live
after readdir live
before readdir syslinux
after readdir syslinux
before readdir tails
after readdir tails
before readdir utils
after readdir utils
before readdir isolinux
*** Error in `/usr/bin/perl': realloc(): invalid next size:
0x0000000001f05850 ***
Same with debian-7.2.0-amd64-i386-netinst.iso and
debian-jessie-DI-b1-amd64-netinst.iso.
If I drop 04_wrong_handling_of_output_parameters.patch, then it works
fine for me. That patch was introduced in 2007 by Tincho. I suspect
the upstream bugs it was meant to fix have been fixed in other ways
since then. Tincho, thoughts? Do you have reproducers for these bugs?
<script>
#!/usr/bin/perl
use strict;
use warnings FATAL => 'all';
use 5.10.1;
use Device::Cdio::ISO9660;
use Device::Cdio::ISO9660::IFS;
my $iso_obj = Device::Cdio::ISO9660::IFS->new(-source => shift);
for my $dir (qw{EFI live syslinux tails utils isolinux}) {
say STDERR "before readdir $dir";
my @readdir = $iso_obj->readdir($dir);
say STDERR "after readdir $dir";
my @content = map {
Device::Cdio::ISO9660::name_translate($_->{filename});
} @readdir;
}
</script>
-- System Information:
Debian Release: 8.0
APT prefers unstable
APT policy: (990, 'unstable')
Architecture: amd64 (x86_64)
Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages libdevice-cdio-perl depends on:
ii libc6 2.19-13
ii libcdio13 0.83-4.2
ii libiso9660-8 0.83-4.2
ii perl 5.20.1-3
ii perl-base [perlapi-5.20.0] 5.20.1-3
libdevice-cdio-perl recommends no packages.
libdevice-cdio-perl suggests no packages.
-- no debconf information
--
intrigeri
--- End Message ---
--- Begin Message ---
Source: libdevice-cdio-perl
Source-Version: 0.3.0-3
We believe that the bug you reported is fixed in the latest version of
libdevice-cdio-perl, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
intrigeri <[email protected]> (supplier of updated libdevice-cdio-perl
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 15 Dec 2014 07:37:16 +0100
Source: libdevice-cdio-perl
Binary: libdevice-cdio-perl
Architecture: source amd64
Version: 0.3.0-3
Distribution: unstable
Urgency: medium
Maintainer: Debian Perl Group <[email protected]>
Changed-By: intrigeri <[email protected]>
Description:
libdevice-cdio-perl - CD Input and control library
Closes: 772005
Changes:
libdevice-cdio-perl (0.3.0-3) unstable; urgency=medium
.
* Team upload.
* Drop 04_wrong_handling_of_output_parameters.patch: we've not been
able to find out what it was good for back in 2007, and it now causes
at least one bug (Closes: #772005).
Checksums-Sha1:
0670423ea9436208011e6ea102eed9ebbc72a017 2346 libdevice-cdio-perl_0.3.0-3.dsc
839711804724876d82d3cbc89f9b002bceda3fcb 5488
libdevice-cdio-perl_0.3.0-3.debian.tar.xz
c269ed5254f7a91f4b0e803b112c556a739174ff 149184
libdevice-cdio-perl_0.3.0-3_amd64.deb
Checksums-Sha256:
d8aa72fe0ca5fa079e48bcf0900349a0964cbe18fb4340c2d76a5d46cc0f44cc 2346
libdevice-cdio-perl_0.3.0-3.dsc
fffc17881d056d909ed96cc58bc61dfdc0e9b1098a20b35e158cb036acb1aeec 5488
libdevice-cdio-perl_0.3.0-3.debian.tar.xz
892284a9d6e8c43f9418657aea6d4c9033748150f4d7e4fb2559a2dca7a73fce 149184
libdevice-cdio-perl_0.3.0-3_amd64.deb
Files:
14e13d028a1445744f5ddfe9c18c51f5 2346 perl optional
libdevice-cdio-perl_0.3.0-3.dsc
7bed58e6d21b4ef368c98b8c96fb9d85 5488 perl optional
libdevice-cdio-perl_0.3.0-3.debian.tar.xz
526a46ad47253a50820a4e27dbdeee51 149184 perl optional
libdevice-cdio-perl_0.3.0-3_amd64.deb
-----BEGIN PGP SIGNATURE-----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=HKB/
-----END PGP SIGNATURE-----
--- End Message ---
