Your message dated Fri, 11 Sep 2009 06:02:06 +0000
with message-id <[email protected]>
and subject line Bug#546059: fixed in dotconf 1.0.13-3
has caused the Debian Bug report #546059,
regarding Patch to fix improper use of realloc.
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
546059: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=546059
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: dotconf
Version: 1.0.13-2
Severity: important
Tags: patch
User: [email protected]
Usertags: origin-ubuntu karmic ubuntu-patch

A user of Ubuntu found that the dotconf library caused the speech-dispatcher 
application to crash at random dueo to an improper use of realloc. Here is the 
patch to fix this behavior.

*** /tmp/tmp8IFlZW
In Ubuntu, we've applied the attached patch to achieve the following:

  * Correctly make use of realloc, to prevent applications using dotconf from
    crashing randomly, Thanks to Eitan Isaacson <[email protected]> for the
    patch. (LP: #427066)

We thought you might be interested in doing the same. 


-- System Information:
Debian Release: squeeze/sid
  APT prefers karmic
  APT policy: (500, 'karmic')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.31-10-generic (SMP w/4 CPU cores)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
--- dotconf-1.0.13.orig/src/dotconf.c
+++ dotconf-1.0.13/src/dotconf.c
@@ -1016,9 +1016,9 @@
 
                                                if ( new_path_len > alloced )
                                                {
-                                                       if ( 
realloc(new_path,new_path_len) == NULL )
+                                                       new_path = 
realloc(new_path,new_path_len);
+                                                       if ( new_path == NULL )
                                                        {
-                                                               free(new_path);
                                                                return -1;
                                                        }
 
@@ -1174,9 +1174,9 @@
 
                                                if ( new_path_len > alloced )
                                                {
-                                                       if ( 
realloc(new_path,new_path_len) == NULL )
+                                                       new_path = 
realloc(new_path,new_path_len);
+                                                       if ( new_path == NULL )
                                                        {
-                                                               free(new_path);
                                                                return -1;
                                                        }
 

--- End Message ---
--- Begin Message ---
Source: dotconf
Source-Version: 1.0.13-3

We believe that the bug you reported is fixed in the latest version of
dotconf, which is due to be installed in the Debian FTP archive:

dotconf_1.0.13-3.diff.gz
  to pool/main/d/dotconf/dotconf_1.0.13-3.diff.gz
dotconf_1.0.13-3.dsc
  to pool/main/d/dotconf/dotconf_1.0.13-3.dsc
libdotconf-dev_1.0.13-3_amd64.deb
  to pool/main/d/dotconf/libdotconf-dev_1.0.13-3_amd64.deb
libdotconf1.0_1.0.13-3_amd64.deb
  to pool/main/d/dotconf/libdotconf1.0_1.0.13-3_amd64.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Shane Wegner <[email protected]> (supplier of updated dotconf package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Thu, 10 Sep 2009 22:46:00 -0700
Source: dotconf
Binary: libdotconf-dev libdotconf1.0
Architecture: source amd64
Version: 1.0.13-3
Distribution: unstable
Urgency: low
Maintainer: Shane Wegner <[email protected]>
Changed-By: Shane Wegner <[email protected]>
Description: 
 libdotconf-dev - Configuration file parser library - development files
 libdotconf1.0 - Configuration file parser library - runtime files
Closes: 546059
Changes: 
 dotconf (1.0.13-3) unstable; urgency=low
 .
   * Correctly make use of realloc, to prevent applications using dotconf from
     crashing randomly, Thanks to Eitan Isaacson <[email protected]> for the
     patch. (Closes: #546059)
Checksums-Sha1: 
 6f84db2ef7e7bb22677debfeb9714ffcd12b2e5a 978 dotconf_1.0.13-3.dsc
 c3b7d352e1ade68d7538fac0b22737551056b1e0 340964 dotconf_1.0.13-3.diff.gz
 91bd38feafb6a41caefd98d36ab661fa07a54df2 50016 
libdotconf-dev_1.0.13-3_amd64.deb
 df39ff157c242e6c47c5f04c50316b00425b11c5 17918 libdotconf1.0_1.0.13-3_amd64.deb
Checksums-Sha256: 
 50c5f5fccdd32444fc1df94a01e825888f445d7106ffe1c809a987a6b8e34677 978 
dotconf_1.0.13-3.dsc
 348c17da18da67c3a547f3749aa2b9e1afc2f8da5c39a36869d99f67f2a37c99 340964 
dotconf_1.0.13-3.diff.gz
 a9ab9b7c2ec08f28d4027ec2778705651851d629686ff32b99c3d4160f1fcb84 50016 
libdotconf-dev_1.0.13-3_amd64.deb
 5117c2cab107c4939a5cd5a6ea307790a161ad6f6c5fbd252afeb40b98e71f02 17918 
libdotconf1.0_1.0.13-3_amd64.deb
Files: 
 1e382707fcc51daa28174a9e7a05a093 978 libs optional dotconf_1.0.13-3.dsc
 22d686a77bf7a4b7bfb91ca7bdd04771 340964 libs optional dotconf_1.0.13-3.diff.gz
 127bbc9a81172779e94497ea42dde1dc 50016 libdevel extra 
libdotconf-dev_1.0.13-3_amd64.deb
 b71b2b700ff879c5e63a01cca17bf9c6 17918 libs optional 
libdotconf1.0_1.0.13-3_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAkqp5KsACgkQT4maTv/jA12ulACeM5CbUVLlLLSrQdbX5TUarPdp
ABwAoN68g8uEaQh6c92KhMWTFvVhVYX0
=X9YS
-----END PGP SIGNATURE-----



--- End Message ---

Reply via email to