Bug#874727: libcoin80v5: Program using libcoin80v5 and any other library that uses lebexpat1 segfaults.

[Sebastian Bachmann]

Dear Maintainer,

I investigated in this bug as well, and found out that the --enable-system-expat
flag in configure seems to not do the job.
The expat library in src/xml/expat is still build and linked.

It is also interessting, that I'm not able to build a working version of libcoin
using a current buster/sid installation.
It build fine, without any error, but starting FreeCAD segfaults immediatly on
startup.

I tried this on my desktop machine:
$ apt-get source libcoin80v5
$ cd coin3-3.1.4~abc9f50+dfsg1/
$ dpkg-buildpackage -us -uc

Then I set up a VM with the help of snapshot.debian.org and used the version of
21 May 2016 (which is the build date of the version in sid).
I had to edit the Makefiles and remove the build of xml/expat but was then able
to build a version with libexpat1 2.2.3 from current sid.

I'm not sure why the flag --enable-system-expat does not disable the build of
the internal expat library. Maybe this is intended?
I'm also not sure if the removal of the internal expat library breaks some
features in libcoin, as I have no idea how to test it.

I hope this helps to resolve this bug quickly :)

regards

Sebastian

On Sat, 09 Sep 2017 02:33:35 -0700 markus  wrote:
> Package: libcoin80v5
> Version: 3.1.4~abc9f50+dfsg1-2
> Severity: critical
> Justification: breaks unrelated software
> 
> Dear Maintainer,
> 
> Due to the change in libexpat1 (since 2.2.0, currently at 2.2.3) the included 
> copy of it in libcoin results in segfaults of any program that uses 
> libexpat1. Specifically any program that uses xml from python and links 
> against libcoin will segfault.
> 
> The stacktrace looks like it is a problem with libexpat1 leading to a 
> segfault in XML_SetHashSalt - however looking at that function there is no 
> way it could possibly segfault - unless of course the provided XMLParser 
> pointer does not actually point to what expat expects to be an XMLParser - 
> which is indeed the case because the XMLParser instance was created by a call 
> into lobcoin which is still on libexpat 2.2.0.
> 
> -- System Information:
> Debian Release: buster/sid
>   APT prefers testing
>   APT policy: (900, 'testing'), (750, 'stable')
> Architecture: amd64 (x86_64)
> 
> Kernel: Linux 4.12.0-1-amd64 (SMP w/2 CPU cores)
> Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8), 
> LANGUAGE=en_CA:en (charmap=UTF-8)
> Shell: /bin/sh linked to /bin/dash
> Init: systemd (via /run/systemd/system)
> 
> Versions of packages libcoin80v5 depends on:
> ii  libc6 2.24-17
> ii  libgcc1   1:7.2.0-3
> ii  libgl1-mesa-glx [libgl1]  13.0.6-1+b2
> ii  libice6   2:1.0.9-2
> ii  libsm62:1.2.2-1+b3
> ii  libstdc++67.2.0-3
> ii  libx11-6  2:1.6.4-3
> ii  libxext6  2:1.3.3-1+b2
> 
> libcoin80v5 recommends no packages.
> 
> Versions of packages libcoin80v5 suggests:
> ii  libbz2-1.0 1.0.6-8.1
> ii  libfreetype6   2.8-0.2
> pn  libopenal0a
> ii  libsimage-dev  1.7.1~2c958a6.dfsg-4
> ii  zlib1g 1:1.2.8.dfsg-5
> 
> -- no debconf information
> 
> 


signature.asc
Description: PGP signature
-- 
debian-science-maintainers mailing list
debian-science-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/debian-science-maintainers

Bug#874727: libcoin80v5: Program using libcoin80v5 and any other library that uses lebexpat1 segfaults.

[mlampert]

Hi,

it breaks FreeCAD, the current version in Debian testing (0.16) and the next 
version (0.17) which is currently under development.

Steps to reproduce in FreeCAD 0.16:
* open new file
* create a box (or some other part)
* switch to Path workbench and create a project
* edit tool table
* if you don't already have a tool table xml file add a tool and "Export" the 
tool table
* "Import" the tool table -> segfault

HTH,
Markus


On Sat, 9 Sep 2017 22:11:47 +0200
Anton Gladky  wrote:

> tags 874727 +moreinfo
> severity 874727 important
> thanks
> 
> Hi,
> 
> thank you for the bugreport. Please provide some more information,
> what packages in Debian are affected.
> 
> Thanks
> 
> Anton
> 
> 
> 2017-09-09 11:33 GMT+02:00 markus :
> > Package: libcoin80v5
> > Version: 3.1.4~abc9f50+dfsg1-2
> > Severity: critical
> > Justification: breaks unrelated software
> >
> > Dear Maintainer,
> >
> > Due to the change in libexpat1 (since 2.2.0, currently at 2.2.3)
> > the included copy of it in libcoin results in segfaults of any
> > program that uses libexpat1. Specifically any program that uses xml
> > from python and links against libcoin will segfault.
> >
> > The stacktrace looks like it is a problem with libexpat1 leading to
> > a segfault in XML_SetHashSalt - however looking at that function
> > there is no way it could possibly segfault - unless of course the
> > provided XMLParser pointer does not actually point to what expat
> > expects to be an XMLParser - which is indeed the case because the
> > XMLParser instance was created by a call into lobcoin which is
> > still on libexpat 2.2.0.  

-- 
debian-science-maintainers mailing list
debian-science-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/debian-science-maintainers

Processed: Re: Bug#874727: libcoin80v5: Program using libcoin80v5 and any other library that uses lebexpat1 segfaults.

[Debian Bug Tracking System]

Processing commands for cont...@bugs.debian.org:

> tags 874727 +moreinfo
Bug #874727 [libcoin80v5] libcoin80v5: Program using libcoin80v5 and any other 
library that uses lebexpat1 segfaults.
Added tag(s) moreinfo.
> severity 874727 important
Bug #874727 [libcoin80v5] libcoin80v5: Program using libcoin80v5 and any other 
library that uses lebexpat1 segfaults.
Severity set to 'important' from 'critical'
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
874727: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=874727
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

-- 
debian-science-maintainers mailing list
debian-science-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/debian-science-maintainers

Bug#874727: libcoin80v5: Program using libcoin80v5 and any other library that uses lebexpat1 segfaults.

[Anton Gladky]

tags 874727 +moreinfo
severity 874727 important
thanks

Hi,

thank you for the bugreport. Please provide some more information,
what packages in Debian are affected.

Thanks

Anton


2017-09-09 11:33 GMT+02:00 markus :
> Package: libcoin80v5
> Version: 3.1.4~abc9f50+dfsg1-2
> Severity: critical
> Justification: breaks unrelated software
>
> Dear Maintainer,
>
> Due to the change in libexpat1 (since 2.2.0, currently at 2.2.3) the included 
> copy of it in libcoin results in segfaults of any program that uses 
> libexpat1. Specifically any program that uses xml from python and links 
> against libcoin will segfault.
>
> The stacktrace looks like it is a problem with libexpat1 leading to a 
> segfault in XML_SetHashSalt - however looking at that function there is no 
> way it could possibly segfault - unless of course the provided XMLParser 
> pointer does not actually point to what expat expects to be an XMLParser - 
> which is indeed the case because the XMLParser instance was created by a call 
> into lobcoin which is still on libexpat 2.2.0.

-- 
debian-science-maintainers mailing list
debian-science-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/debian-science-maintainers

Bug#874727: libcoin80v5: Program using libcoin80v5 and any other library that uses lebexpat1 segfaults.

[markus]

Package: libcoin80v5
Version: 3.1.4~abc9f50+dfsg1-2
Severity: critical
Justification: breaks unrelated software

Dear Maintainer,

Due to the change in libexpat1 (since 2.2.0, currently at 2.2.3) the included 
copy of it in libcoin results in segfaults of any program that uses libexpat1. 
Specifically any program that uses xml from python and links against libcoin 
will segfault.

The stacktrace looks like it is a problem with libexpat1 leading to a segfault 
in XML_SetHashSalt - however looking at that function there is no way it could 
possibly segfault - unless of course the provided XMLParser pointer does not 
actually point to what expat expects to be an XMLParser - which is indeed the 
case because the XMLParser instance was created by a call into lobcoin which is 
still on libexpat 2.2.0.

-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (900, 'testing'), (750, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.12.0-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_CA:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages libcoin80v5 depends on:
ii  libc6 2.24-17
ii  libgcc1   1:7.2.0-3
ii  libgl1-mesa-glx [libgl1]  13.0.6-1+b2
ii  libice6   2:1.0.9-2
ii  libsm62:1.2.2-1+b3
ii  libstdc++67.2.0-3
ii  libx11-6  2:1.6.4-3
ii  libxext6  2:1.3.3-1+b2

libcoin80v5 recommends no packages.

Versions of packages libcoin80v5 suggests:
ii  libbz2-1.0 1.0.6-8.1
ii  libfreetype6   2.8-0.2
pn  libopenal0a
ii  libsimage-dev  1.7.1~2c958a6.dfsg-4
ii  zlib1g 1:1.2.8.dfsg-5

-- no debconf information

-- 
debian-science-maintainers mailing list
debian-science-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/debian-science-maintainers