Your message dated Sat, 04 Jan 2025 07:04:07 +0000
with message-id <[email protected]>
and subject line Bug#827504: fixed in birthday 1.6.2-5
has caused the Debian Bug report #827504,
regarding birthday: unresponsive for some malformed inputs
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
827504: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=827504
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: birthday
Version: 1.6.2-4
Severity: normal
Dear Patrick Uiterwijk,
Some malformed input files result in a hung process with no warnings for
longer than 1 second. This is reproducible in both jessie and sid.
I have attached some example inputs that reproduce the bug. Manual
backtraces using gdb point to lines 386 and 387 of bdengine.c in the
ddiff() function and lines 413 and 414 of bdengine.c in the delta()
function.
The inputs were generated by afl-fuzz.
Sincerely,
Nathaniel Beaver
-- System Information:
Debian Release: 8.5
APT prefers stable
APT policy: (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8) (ignored:
LC_ALL set to en_US.UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages birthday depends on:
ii libc6 2.19-18+deb8u4
Versions of packages birthday recommends:
ii perl 5.20.2-3+deb8u5
birthday suggests no packages.
-- no debconf information
birthday-hang.tar.gz
Description: application/gzip
--- End Message ---
--- Begin Message ---
Source: birthday
Source-Version: 1.6.2-5
Done: Andreas Tille <[email protected]>
We believe that the bug you reported is fixed in the latest version of
birthday, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Andreas Tille <[email protected]> (supplier of updated birthday package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Mon, 21 Oct 2024 07:11:40 +0200
Source: birthday
Architecture: source
Version: 1.6.2-5
Distribution: unstable
Urgency: medium
Maintainer: Package Salvaging Team <[email protected]>
Changed-By: Andreas Tille <[email protected]>
Closes: 827498 827504 1085599
Changes:
birthday (1.6.2-5) unstable; urgency=medium
.
[ Andreas Tille ]
* Team upload.
* Maintain package in Package Salvage team
Closes: #1085599
* Convert from cdbs to dh
* Standards-Version: 4.7.0 (routine-update)
* debhelper-compat 13 (routine-update)
* Remove trailing whitespace in debian/copyright (routine-update)
* Rules-Requires-Root: no (routine-update)
* Trim trailing whitespace.
* Strip unusual field spacing from debian/control.
* watch file standard 4 (routine-update)
* Fix installation of manpage
.
[ наб ]
* d/p/0004: Don't loop forever if ddiff() gets D1 > D2
d/p/0006: Invent hard limits to prevent looping for (u32)-1
Closes: #827504
* d/p/0005: Don't leave uninitialised data after scan_date().
Don't segfault if month=0
Closes: #827498
Checksums-Sha1:
9d8a2d89ca311822290295b0bf64d51508b16133 1943 birthday_1.6.2-5.dsc
13158fafcbbcbb44fc0c75ad8d6ea962d2ee22e4 12992 birthday_1.6.2-5.debian.tar.xz
d853dd6985d7defa127109353b65e916af73584c 6290 birthday_1.6.2-5_amd64.buildinfo
Checksums-Sha256:
52b88ec92b939cb1ae6198cd0688b0db5b652f0fe8783e67a1e3c1a4e3fa2216 1943
birthday_1.6.2-5.dsc
c36a2df68a0d7140bfebf5fb9190ce07b43ebc903bd2580d3d71f4df94664e32 12992
birthday_1.6.2-5.debian.tar.xz
9dbfdc1184860ed06911f40d374c58b4950cd06e2757df983c0efa7f0d03acf6 6290
birthday_1.6.2-5_amd64.buildinfo
Files:
e7bd6f6414402ec8e62e095416d41f2a 1943 misc optional birthday_1.6.2-5.dsc
2cc1b182c2f1c2639aee9de57a02450d 12992 misc optional
birthday_1.6.2-5.debian.tar.xz
87b5ef588e394d9348ee961a4b7a7af0 6290 misc optional
birthday_1.6.2-5_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=vpen
-----END PGP SIGNATURE-----
pgpwadT8c9NlJ.pgp
Description: PGP signature
--- End Message ---
