Control: severity -1 serious
On Sun, Jul 16, 2017 at 04:55:24PM +0200, Jakub Wilk wrote:
> Package: pev
> Version: 0.80-2
>
> pehash seems to crash on every file:
>
> $ echo 'int main(int argc, char **argv) {}' | i686-w64-mingw32-gcc -x c -
> -o test.exe
> $ pehash test.exe
> Segmentation fault
>
> Backtrace:
>
> #0 output_open_scope (scope_name=0x5655add8 "file",
> scope_type=OUTPUT_SCOPE_TYPE_OBJECT) at output.c:293
> #1 0x56556f42 in main (argc=<optimized out>, argv=<optimized out>) at
> pehash.c:557
pehash is not the only program that segfaults:
$ pescan --version
pescan from pev 0.50 <http://pev.sf.net> toolkit
Copyright (C) 2012 Fernando Mercês.
License GPLv3+: GNU GPL version 3 or later
<http://gnu.org/licenses/gpl.html>.
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.
$ pescan test.exe
entrypoint: normal
DOS stub: normal
TLS directory: found - 2 function(s)
Sections: 15 - suspicious
$
$ pescan --version
pescan from pev 0.80 <http://pev.sf.net> toolkit
License GPLv2+: GNU GPL version 2 or later
<https://www.gnu.org/licenses/gpl-2.0.txt>.
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.
$ pescan test.exe
file entropy: 5.924796 (normal)
fpu anti-disassembly: no
imagebase: normal
entrypoint: normal
DOS stub: normal
TLS directory: found - 1 function(s)
timestamp: normal
section count: 15 (high)
Segmentation fault
$
Raising severity to keep the broken version out of buster.
> Jakub Wilk
cu
Adrian
--
"Is there not promise of rain?" Ling Tan asked suddenly out
of the darkness. There had been need of rain for many days.
"Only a promise," Lao Er said.
Pearl S. Buck - Dragon Seed
