Your message dated Thu, 04 Dec 2014 19:07:23 +0100
with message-id <[email protected]>
and subject line Re: Bug#772049: unblock: lpr/1:2008.05.17.1
has caused the Debian Bug report #772049,
regarding unblock: lpr/1:2008.05.17.1
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
772049: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=772049
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: release.debian.org
Severity: normal
User: [email protected]
Usertags: unblock
Please unblock package lpr
Current version in testing has an integer overflow bug when checking for free
blocks in the spool directory. When the spool directory free space is larger
than 1TB, it starts to erroneously report "Not enough space".
This was reported in #769925 (important).
diff -Nru lpr-2008.05.17+nmu1/debian/changelog lpr-2008.05.17.1/debian/changelog
--- lpr-2008.05.17+nmu1/debian/changelog 2011-04-22 09:23:06.000000000
-0500
+++ lpr-2008.05.17.1/debian/changelog 2014-11-20 21:37:57.000000000 -0600
@@ -1,3 +1,11 @@
+lpr (1:2008.05.17.1) unstable; urgency=medium
+
+ * Acknowledge NMU. Thank you. (closes: #544552)
+ * Fix an integer overflow in chksize() function on systems with > 1TB
+ spool partition. (closes: #769925)
+
+ -- Adam Majer <[email protected]> Thu, 20 Nov 2014 21:33:12 -0600
+
lpr (1:2008.05.17+nmu1) unstable; urgency=low
* Non-maintainer upload to fix a 1.5 years old pending bug.
diff -Nru lpr-2008.05.17+nmu1/lpd/recvjob.c lpr-2008.05.17.1/lpd/recvjob.c
--- lpr-2008.05.17+nmu1/lpd/recvjob.c 2005-01-28 22:40:20.000000000 -0600
+++ lpr-2008.05.17.1/lpd/recvjob.c 2014-11-20 21:46:02.000000000 -0600
@@ -1,4 +1,4 @@
-/* $OpenBSD: recvjob.c,v 1.23 2003/06/02 23:36:53 millert Exp $ */
+/* $OpenBSD: recvjob.c,v 1.24 2008/09/02 00:14:23 deraadt Exp $ */
/* $NetBSD: recvjob.c,v 1.14 2001/12/04 22:52:44 christos Exp $ */
/*
@@ -41,7 +41,7 @@
#if 0
static const char sccsid[] = "@(#)recvjob.c 8.2 (Berkeley) 4/27/95";
#else
-static const char rcsid[] = "$OpenBSD: recvjob.c,v 1.23 2003/06/02 23:36:53
millert Exp $";
+static const char rcsid[] = "$OpenBSD: recvjob.c,v 1.24 2008/09/02 00:14:23
deraadt Exp $";
#endif
#endif /* not lint */
@@ -298,9 +298,11 @@
static int
chksize(int size)
{
- int spacefree;
+ int64_t spacefree;
struct statfs sfb;
+ if (size <= 0)
+ return (0);
if (statfs(".", &sfb) < 0) {
syslog(LOG_ERR, "%s: %m", "statfs(\".\")");
return (1);
unblock lpr/1:2008.05.17.1
--- End Message ---
--- Begin Message ---
On 2014-12-04 18:24, Adam Majer wrote:
> Package: release.debian.org
> Severity: normal
> User: [email protected]
> Usertags: unblock
>
> Please unblock package lpr
>
> Current version in testing has an integer overflow bug when checking for free
> blocks in the spool directory. When the spool directory free space is larger
> than 1TB, it starts to erroneously report "Not enough space".
>
> This was reported in #769925 (important).
>
> [...]
>
> unblock lpr/1:2008.05.17.1
>
>
Unblocked, thanks.
~Niels
--- End Message ---