For LTS releases new features aren't necessarily a bad thing - but if
there are any, those need to be properly documented with SRU paperwork
if not stated otherwise by an SRU exception. The bug should include
rationale as of why the change is needed in the given LTS.

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to snapd-glib in Ubuntu.
https://bugs.launchpad.net/bugs/1740865

Title:
  gnome-software (5) g_realloc → g_array_maybe_expand → g_array_set_size
  → g_byte_array_set_size → read_cb

Status in snapd-glib package in Ubuntu:
  Fix Committed
Status in snapd-glib source package in Bionic:
  In Progress
Status in snapd-glib source package in Cosmic:
  Fix Committed

Bug description:
  [Impact]
  snapd-glib can do an invalid memory access when parsing HTTP chunked data. 
Found doing code inspection and testing based on crash reports.

  [Test Case]
  No specific trigger - just look for reduced reports on errors.ubuntu.com.

  [Regression Potential]
  Some risk of further breaking HTTP handling in snapd-glib. Updated algorithm 
tested in a test program run through valgrind to give confidence in the changes.

  Error reports:

  https://errors.ubuntu.com/problem/d94c431d27115bab216f9e1ea756f876e7cd933b

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/snapd-glib/+bug/1740865/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to     : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to