Your message dated Thu, 18 Feb 2016 10:23:36 +0000
with message-id <[email protected]>
and subject line Bug#658539: fixed in mg 20160118-2
has caused the Debian Bug report #658539,
regarding mg segfaults when trying to open a file using ~ if getlogin returns 
null
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
658539: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=658539
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: mg
Version: 20110905-1
Severity: normal

If I open a file starting with ~, not specifying the username, mg uses
getlogin to try to figure who I am. On my machine, getlogin is
returning NULL and mg doesn't test for this. 

I'm uncertain as to why getlogin is returning NULL -- because I have
no utmp or wtmp? Or because /proc/self/loginuid returns UINT32_MAX ?
-- but it's a permitted error signalling value.

Specifically, in fileio.c:adjustname,

        /* first handle tilde expansion */
        if (fn[0] == '~') {
[...]
                if (ulen == 0) /* ~/ or ~ */
                        (void)strlcpy(user, getlogin(), sizeof(user));

And then strlcpy dereferences the NULL pointer it was passed.

I'm not certain what the right solution is if we can't get the user's
name, but segfaulting is definitely right out. 

Thanks!
 - Robert Jacobs


-- System Information:
Debian Release: wheezy/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 3.2.0-1-686-pae (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages mg depends on:
ii  libc6        2.13-26
ii  libncurses5  5.9-4

mg recommends no packages.

mg suggests no packages.

-- no debconf information



--- End Message ---
--- Begin Message ---
Source: mg
Source-Version: 20160118-2

We believe that the bug you reported is fixed in the latest version of
mg, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Harald Dunkel <[email protected]> (supplier of updated mg package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 08 Feb 2016 12:37:58 +0100
Source: mg
Binary: mg
Architecture: source
Version: 20160118-2
Distribution: unstable
Urgency: medium
Maintainer: Harald Dunkel <[email protected]>
Changed-By: Harald Dunkel <[email protected]>
Description:
 mg         - microscopic GNU Emacs-style editor
Closes: 635772 658539 661732
Changes:
 mg (20160118-2) unstable; urgency=medium
 .
   * 0003-Keep-mtime-for-backup.patch: keep old modification time for
     backup (closes: #635772)
   * #658539 has been resolved upstream (closes: #658539)
   * Peter's patch was accepted upstream (closes: #661732)
Checksums-Sha1:
 68531d44240e2b818c9039a5de5fd6dad01a3683 1524 mg_20160118-2.dsc
 b7f7cfa4485a56d4b63687a195b66f4ff41921f8 5460 mg_20160118-2.debian.tar.xz
Checksums-Sha256:
 0bfee160039190593d3de3a68b74f804dd51081774006896697683f5f11a44c1 1524 
mg_20160118-2.dsc
 5b12163ebc4affee0ac759c5aa4b5c197b9b810f2f8a074063bd9b0a4a0041ce 5460 
mg_20160118-2.debian.tar.xz
Files:
 daf3b452a55cda296c75bb197b5c964a 1524 editors optional mg_20160118-2.dsc
 6d3824ab532c50137558a1b78cb39d0c 5460 editors optional 
mg_20160118-2.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBCgAGBQJWxYwXAAoJEILCCkopy7/VW08H/iMabU6WH+vLJ5ujFosK8LWH
ni5h+RABg2RFQorv37BwuUeNnyLdUKmXYj2+HLDvcy/u/gFdNqP0DnwhtddUFN/8
GtAi5/+2chlJXEuY4MStPoqZMX8WwbIa0RErEYsasoiMmoNAk5tE7eMQL13SOg2i
shLiMW4YRkd8UEWsYKV4ANRZHlEHg5xam7jAf15P3ppiOq6z9NZeKFY0U4J4IC7l
rvrAMEd6lEHcFwbKFvzaO3U0W7VKzD4ul14+S8N/sZkFp+yBVrWr45DzfOwnUAhQ
2RfCdR2ZNUjNal+VBpq7wNf2UBlZa2kur0EUHREzlre21tzHo/nF8QODPhYqSfI=
=LEy/
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to