[Touch-packages] [Bug 1641592] Re: nano 2.5.3-2 on Xenial crashes with long paths on lockfiles

2017-02-22 Thread Launchpad Bug Tracker 
This bug was fixed in the package nano - 2.5.3-2ubuntu2

---
nano (2.5.3-2ubuntu2) xenial-proposed; urgency=medium

  * Apply upstream patch to allocate enough space for the prompt when finding
a lock file. (LP: #1641592)

 -- Brian Murray   Tue, 14 Feb 2017 15:10:03 -0800

** Changed in: nano (Ubuntu Xenial)
   Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to nano in Ubuntu.
https://bugs.launchpad.net/bugs/1641592

Title:
  nano 2.5.3-2 on Xenial crashes with long paths on lockfiles

Status in nano package in Ubuntu:
  Fix Released
Status in nano source package in Xenial:
  Fix Released

Bug description:
  # lsb_release -rd
  Description:Ubuntu 16.04.1 LTS
  Release:16.04
  # apt-cache policy nano
  nano:
Installed: 2.5.3-2
Candidate: 2.5.3-2

  Reproducer:
  1. # nano -G 
999
  2. 
  3. # nano -G 
999
  4. 
  5. 

  Quick dissection:
  Looking at function do_lockfile in files.c, it seems that promptstr is 
statically allocated to 128 characters. Now with a sufficiently long filename, 
the following sprintf() call will overflow the allocated promptstr buffer and 
corrupt memory.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/nano/+bug/1641592/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp

[Touch-packages] [Bug 1641592] Re: nano 2.5.3-2 on Xenial crashes with long paths on lockfiles

2017-02-15 Thread Antti Tönkyrä 
Package from
https://launchpad.net/ubuntu/+source/nano/2.5.3-2ubuntu2/+build/12012329/+files/nano_2.5.3-2ubuntu2_amd64.deb
worked as expected and fixes the bug described. Thanks!

** Tags removed: verification-needed
** Tags added: verification-done

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to nano in Ubuntu.
https://bugs.launchpad.net/bugs/1641592

Title:
  nano 2.5.3-2 on Xenial crashes with long paths on lockfiles

Status in nano package in Ubuntu:
  Fix Released
Status in nano source package in Xenial:
  Fix Committed

Bug description:
  # lsb_release -rd
  Description:Ubuntu 16.04.1 LTS
  Release:16.04
  # apt-cache policy nano
  nano:
Installed: 2.5.3-2
Candidate: 2.5.3-2

  Reproducer:
  1. # nano -G 
999
  2. 
  3. # nano -G 
999
  4. 
  5. 

  Quick dissection:
  Looking at function do_lockfile in files.c, it seems that promptstr is 
statically allocated to 128 characters. Now with a sufficiently long filename, 
the following sprintf() call will overflow the allocated promptstr buffer and 
corrupt memory.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/nano/+bug/1641592/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp

[Touch-packages] [Bug 1641592] Re: nano 2.5.3-2 on Xenial crashes with long paths on lockfiles

2017-02-15 Thread Chris J Arges 
Hello Antti, or anyone else affected,

Accepted nano into xenial-proposed. The package will build now and be
available at https://launchpad.net/ubuntu/+source/nano/2.5.3-2ubuntu2 in
a few hours, and then in the -proposed repository.

Please help us by testing this new package.  See
https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to
enable and use -proposed.  Your feedback will aid us getting this update
out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug,
mentioning the version of the package you tested, and change the tag
from verification-needed to verification-done. If it does not fix the
bug for you, please add a comment stating that, and change the tag to
verification-failed.  In either case, details of your testing will help
us make a better decision.

Further information regarding the verification process can be found at
https://wiki.ubuntu.com/QATeam/PerformingSRUVerification .  Thank you in
advance!

** Changed in: nano (Ubuntu Xenial)
   Status: Triaged => Fix Committed

** Tags added: verification-needed

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to nano in Ubuntu.
https://bugs.launchpad.net/bugs/1641592

Title:
  nano 2.5.3-2 on Xenial crashes with long paths on lockfiles

Status in nano package in Ubuntu:
  Fix Released
Status in nano source package in Xenial:
  Fix Committed

Bug description:
  # lsb_release -rd
  Description:Ubuntu 16.04.1 LTS
  Release:16.04
  # apt-cache policy nano
  nano:
Installed: 2.5.3-2
Candidate: 2.5.3-2

  Reproducer:
  1. # nano -G 
999
  2. 
  3. # nano -G 
999
  4. 
  5. 

  Quick dissection:
  Looking at function do_lockfile in files.c, it seems that promptstr is 
statically allocated to 128 characters. Now with a sufficiently long filename, 
the following sprintf() call will overflow the allocated promptstr buffer and 
corrupt memory.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/nano/+bug/1641592/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp

[Touch-packages] [Bug 1641592] Re: nano 2.5.3-2 on Xenial crashes with long paths on lockfiles

2017-02-14 Thread Brian Murray 
I've uploaded this to the -proposed queue for review by the SRU team.

** Changed in: nano (Ubuntu Xenial)
 Assignee: (unassigned) => Brian Murray (brian-murray)

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to nano in Ubuntu.
https://bugs.launchpad.net/bugs/1641592

Title:
  nano 2.5.3-2 on Xenial crashes with long paths on lockfiles

Status in nano package in Ubuntu:
  Fix Released
Status in nano source package in Xenial:
  Triaged

Bug description:
  # lsb_release -rd
  Description:Ubuntu 16.04.1 LTS
  Release:16.04
  # apt-cache policy nano
  nano:
Installed: 2.5.3-2
Candidate: 2.5.3-2

  Reproducer:
  1. # nano -G 
999
  2. 
  3. # nano -G 
999
  4. 
  5. 

  Quick dissection:
  Looking at function do_lockfile in files.c, it seems that promptstr is 
statically allocated to 128 characters. Now with a sufficiently long filename, 
the following sprintf() call will overflow the allocated promptstr buffer and 
corrupt memory.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/nano/+bug/1641592/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp

[Touch-packages] [Bug 1641592] Re: nano 2.5.3-2 on Xenial crashes with long paths on lockfiles

2017-02-14 Thread Brian Murray 
** Also affects: nano (Ubuntu Xenial)
   Importance: Undecided
   Status: New

** Changed in: nano (Ubuntu Xenial)
   Status: New => Triaged

** Changed in: nano (Ubuntu Xenial)
   Importance: Undecided => High

** Changed in: nano (Ubuntu)
   Status: Triaged => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to nano in Ubuntu.
https://bugs.launchpad.net/bugs/1641592

Title:
  nano 2.5.3-2 on Xenial crashes with long paths on lockfiles

Status in nano package in Ubuntu:
  Fix Released
Status in nano source package in Xenial:
  Triaged

Bug description:
  # lsb_release -rd
  Description:Ubuntu 16.04.1 LTS
  Release:16.04
  # apt-cache policy nano
  nano:
Installed: 2.5.3-2
Candidate: 2.5.3-2

  Reproducer:
  1. # nano -G 
999
  2. 
  3. # nano -G 
999
  4. 
  5. 

  Quick dissection:
  Looking at function do_lockfile in files.c, it seems that promptstr is 
statically allocated to 128 characters. Now with a sufficiently long filename, 
the following sprintf() call will overflow the allocated promptstr buffer and 
corrupt memory.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/nano/+bug/1641592/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp

[Touch-packages] [Bug 1641592] Re: nano 2.5.3-2 on Xenial crashes with long paths on lockfiles

2017-02-06 Thread Brian Murray 
** Changed in: nano (Ubuntu)
   Status: New => Triaged

** Changed in: nano (Ubuntu)
   Importance: Undecided => High

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to nano in Ubuntu.
https://bugs.launchpad.net/bugs/1641592

Title:
  nano 2.5.3-2 on Xenial crashes with long paths on lockfiles

Status in nano package in Ubuntu:
  Triaged

Bug description:
  # lsb_release -rd
  Description:Ubuntu 16.04.1 LTS
  Release:16.04
  # apt-cache policy nano
  nano:
Installed: 2.5.3-2
Candidate: 2.5.3-2

  Reproducer:
  1. # nano -G 
999
  2. 
  3. # nano -G 
999
  4. 
  5. 

  Quick dissection:
  Looking at function do_lockfile in files.c, it seems that promptstr is 
statically allocated to 128 characters. Now with a sufficiently long filename, 
the following sprintf() call will overflow the allocated promptstr buffer and 
corrupt memory.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/nano/+bug/1641592/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp

[Touch-packages] [Bug 1641592] Re: nano 2.5.3-2 on Xenial crashes with long paths on lockfiles

2016-11-14 Thread Ubuntu Foundations Team Bug Bot 
The attachment "fixes the crash when finding lockfiles for long names"
seems to be a patch.  If it isn't, please remove the "patch" flag from
the attachment, remove the "patch" tag, and if you are a member of the
~ubuntu-reviewers, unsubscribe the team.

[This is an automated message performed by a Launchpad user owned by
~brian-murray, for any issues please contact him.]

** Tags added: patch

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to nano in Ubuntu.
https://bugs.launchpad.net/bugs/1641592

Title:
  nano 2.5.3-2 on Xenial crashes with long paths on lockfiles

Status in nano package in Ubuntu:
  New

Bug description:
  # lsb_release -rd
  Description:Ubuntu 16.04.1 LTS
  Release:16.04
  # apt-cache policy nano
  nano:
Installed: 2.5.3-2
Candidate: 2.5.3-2

  Reproducer:
  1. # nano -G 
999
  2. 
  3. # nano -G 
999
  4. 
  5. 

  Quick dissection:
  Looking at function do_lockfile in files.c, it seems that promptstr is 
statically allocated to 128 characters. Now with a sufficiently long filename, 
the following sprintf() call will overflow the allocated promptstr buffer and 
corrupt memory.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/nano/+bug/1641592/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp

[Touch-packages] [Bug 1641592] Re: nano 2.5.3-2 on Xenial crashes with long paths on lockfiles

2016-11-14 Thread Benno Schulenberg 
This is a duplicate of upstream bug https://savannah.gnu.org/bugs/?47511
.

The problem was fixed in git, commit fb9585e.  See attached patch.  The
fix is in version 2.6.0 and higher.

Thanks for reporting.

** Bug watch added: GNU Savannah Bug Tracker #47511
   http://savannah.gnu.org/bugs/?47511

** Patch added: "fixes the crash when finding lockfiles for long names"
   
https://bugs.launchpad.net/ubuntu/+source/nano/+bug/1641592/+attachment/4777372/+files/allocate-enough-space.patch

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to nano in Ubuntu.
https://bugs.launchpad.net/bugs/1641592

Title:
  nano 2.5.3-2 on Xenial crashes with long paths on lockfiles

Status in nano package in Ubuntu:
  New

Bug description:
  # lsb_release -rd
  Description:Ubuntu 16.04.1 LTS
  Release:16.04
  # apt-cache policy nano
  nano:
Installed: 2.5.3-2
Candidate: 2.5.3-2

  Reproducer:
  1. # nano -G 
999
  2. 
  3. # nano -G 
999
  4. 
  5. 

  Quick dissection:
  Looking at function do_lockfile in files.c, it seems that promptstr is 
statically allocated to 128 characters. Now with a sufficiently long filename, 
the following sprintf() call will overflow the allocated promptstr buffer and 
corrupt memory.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/nano/+bug/1641592/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp