Your message dated Tue, 13 Feb 2018 23:21:26 +0000 with message-id <e1eljt8-0005kr...@fasolo.debian.org> and subject line Bug#869777: fixed in yara 3.7.1-2 has caused the Debian Bug report #869777, regarding yara tests fail on ARM32, when run on a 64bit kernel to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 869777: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=869777 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: src:yara Version: 3.6.3+dfsg-1 Forwarded: https://github.com/VirusTotal/yara/issues/716 Tags: upstream yara tests fail on ARM32, when run on a 64bit kernel. This turns out to be because the codebase is full of code that assumes unaligned access is OK, for example stuff like this https://github.com/VirusTotal/yara/blob/master/libyara/exec.c#L224 but also more subtly stuff like https://github.com/VirusTotal/yara/blob/master/libyara/scan.c#L409 (new_match is only guaranteed to be 4-byte-aligned and crashes when you access an 8 byte field). make check-TESTS make[3]: Entering directory '/<<BUILDDIR>>/yara-3.6.3+dfsg' make[4]: Entering directory '/<<BUILDDIR>>/yara-3.6.3+dfsg' PASS: test-alignment FAIL: test-rules FAIL: test-pe FAIL: test-elf PASS: test-version FAIL: test-exception ================================== yara 3.6.3: ./test-suite.log ================================== # TOTAL: 6 # PASS: 2 # SKIP: 0 # XFAIL: 0 # FAIL: 4 # XPASS: 0 # ERROR: 0 .. contents:: :depth: 2 FAIL: test-rules ================ yr_rules_scan_mem: error FAIL test-rules (exit status: 1) FAIL: test-pe ============= yr_rules_scan_mem: error FAIL test-pe (exit status: 1) FAIL: test-elf ============== yr_rules_scan_mem: error FAIL test-elf (exit status: 1) FAIL: test-exception ==================== Scanning for "aaaa"... err = 4, matches = 0 Sending blocked SIGUSR1 to ourselves... Scanning for {00 00 00 00}... err = 4, matches = 0 Scanning for "aaaa"... err = 4, matches = 0 Expected subprocess to be terminated by signal Test: crash Test: crash-no-handle Test: blocked-signal Test: crash-other-thread FAIL test-exception (exit status: 1) ============================================================================ Testsuite summary for yara 3.6.3 ============================================================================ # TOTAL: 6 # PASS: 2 # SKIP: 0 # XFAIL: 0 # FAIL: 4 # XPASS: 0 # ERROR: 0 ============================================================================ See ./test-suite.log Please report to vmalva...@virustotal.com ============================================================================ Makefile:1000: recipe for target 'test-suite.log' failed make[4]: *** [test-suite.log] Error 1
--- End Message ---
--- Begin Message ---Source: yara Source-Version: 3.7.1-2 We believe that the bug you reported is fixed in the latest version of yara, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 869...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Hilko Bengen <ben...@debian.org> (supplier of updated yara package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 13 Feb 2018 23:27:11 +0100 Source: yara Binary: yara libyara3 libyara-dev yara-doc Architecture: source Version: 3.7.1-2 Distribution: unstable Urgency: medium Maintainer: Debian Forensics <forensics-devel@lists.alioth.debian.org> Changed-By: Hilko Bengen <ben...@debian.org> Description: libyara-dev - YARA development libraries and headers libyara3 - YARA shared library yara - Pattern matching swiss knife for malware researchers yara-doc - HTML documentation for YARA Closes: 869777 Changes: yara (3.7.1-2) unstable; urgency=medium . * Fix unaligned access that leads to failing tests. Thanks to Matthias Klose for the patch. (Closes: #869777) Checksums-Sha1: b3a2ddee28377f924fec10ee9cfd14b1e149280f 2104 yara_3.7.1-2.dsc d692dac21def535b4e0beb949cb01d8852dfe109 7880 yara_3.7.1-2.debian.tar.xz eb6fc1a98b22b0079b51eff92222120abe733d38 4086 yara_3.7.1-2_source.buildinfo Checksums-Sha256: 390adba34dc539b856274c4bbc7b37aec58840b7e95916b59f13fbc3a791653f 2104 yara_3.7.1-2.dsc 447439a9f1fca3801a2d9a58cd73becce14494505b4efdf1ae5e227c08050856 7880 yara_3.7.1-2.debian.tar.xz f0a819fbddfed093969ea004bd8fb19bb31e5b230d76f777cdddfd3cfef98dc8 4086 yara_3.7.1-2_source.buildinfo Files: 48d13e68da13d529d5445f5846600b34 2104 utils optional yara_3.7.1-2.dsc 8092dc8cd711d584ac33d6c0bef0c041 7880 utils optional yara_3.7.1-2.debian.tar.xz 263a8aaf96c8533d9a791d722e2c3520 4086 utils optional yara_3.7.1-2_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEErnMQVUQqHZbPTUx4dbcQY1whOn4FAlqDcCwACgkQdbcQY1wh On5dsRAAk/Yu/5uTfJ8dcN4/UvOV9Dswd2WCD+aZrgTeKfrqnI/wvUyTYiphAnY8 a4AOxou/JOOcPCsUvHGNa3HNW0uG7e+YXOX9bHgZquKfGlWjiozeG0uRUXzXtOpT zNscmgPLhBL2obxT/nX8LnTK3w+xlm32Uw77Rmd9/I6kEY6Q+h80BqeWGJv9AhC6 DTwDJbyB6/YqHXcHW0aEw9H9Uqt+G4VTGKHRWNjmdsnaeyPV8XIWItJDle3zWQ1d qGx/AdPeyQhBzeS8KuiAokQ7R9sTL0soqiy49vSMIGkF4Z34XHkg/345WWCnJNjZ zlQMmpiPCXH5NgyxGbefxkpDtI7uwChAKX5kRKrQQ756uGRF+YqmehqJIL8F60Gs ZUYpojdHk7lDJ+zrTDpFTgm35Tr4pQFXMB5GPyfEjyFhe6Kh4o3IoQT099dlWqmL U1J2I+stVF9OnuDdz9FDlZNwGja/OOvc3UaLAkMSRpuw8NFiM/KNslUcSQZZpF34 vEcpVFrYY2htTjDJHl9BQqJMlEg5JpStQkptfCsnJugH7oRxnIYA7R17leK7oEIE 6rPnA9pPbpj3Y/t0kbLSf6se4cCsjkMvQ+ZEVoczyfKTiZEN/qxslu+nNVD+zQrF UwyZgiZK6x/dGn3ighsMzf5Jcxx5oeNs2HD/zQYU4xZjG93eoSk= =kLY6 -----END PGP SIGNATURE-----
--- End Message ---
_______________________________________________ forensics-devel mailing list forensics-devel@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/forensics-devel
