Stephen Kitt wrote:
I did provide a way to reproduce the problem, and Daniel reproduced it;
I will readily admit that it's neither convenient nor particularly useful
to identify the source of the problem, but dismissing this because
there's no way to reproduce it seems rather unfair to me.
See https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=902936#5 for
details. (I did also suggest that the real issue may lie somewhere else,
since zutils 1.7 exhibits the bug if it's built on Debian stable, and
doesn't if it's built on unstable.)
Thanks for the report and for your support. I have finally managed to
reproduce the problem. It seems to happen only when the -t option is
used. It is not a double-free as Ben Hutchings suggested, but a buffer
overrun.
BTW, what I find unfair are all those accusations of dismissal. I do not
have access to a Debian installation and have spent a lot of time trying
to find a file that triggered this bug.
I'll release a fixed version later today.
Best regards,
Antonio.
