Package: otpclient
Version: 5.1.2-1
Severity: normal

Just after typing the first character of the password to unlock
the database (after starting otpclient), I get the following
error in the terminal:

couldn't lock 16384 bytes of memory (gtk): Cannot allocate memory

Indeed, strace shows:

  mlock(0x7fa42aa9a000, 16384)     = -1 ENOMEM (Cannot allocate memory)

Last year, there was

  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1098822
  otpclient: otpclient complains about lock memory limits
  (show_memlock_warning)

but the memlock was more than 8 MB. Here, this is much smaller!

I don't know the consequences. A potential security issue about
the password?

-- System Information:
Debian Release: forky/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'stable-updates'), (500, 
'stable-security'), (500, 'stable-debug'), (500, 'proposed-updates-debug'), 
(500, 'unstable'), (500, 'testing'), (500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 6.7.12-amd64 (SMP w/16 CPU threads; PREEMPT)
Kernel taint flags: TAINT_WARN
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages otpclient depends on:
ii  dconf-gsettings-backend [gsettings-backend]  0.49.0-4
ii  libadwaita-1-0                               1.9.2-1
ii  libc6                                        2.42-17
ii  libcotp4                                     4.2.1-1
ii  libgcrypt20                                  1.12.2-1
ii  libgdk-pixbuf-2.0-0                          2.44.6+dfsg-2
ii  libglib2.0-0t64                              2.88.2-1
ii  libgtk-4-1                                   4.22.4+ds-1
ii  libjansson4                                  2.15.1-1
ii  libprotobuf-c1                               1.5.1-1
ii  libqrencode4                                 4.1.1-2
ii  libsecret-1-0                                0.21.7-2
ii  libuuid1                                     2.42.2-1
ii  libzbar0t64                                  0.23.93-9+b3

otpclient recommends no packages.

Versions of packages otpclient suggests:
ii  otpclient-cli  5.1.2-1

-- no debconf information

-- 
Vincent Lefèvre <[email protected]> - Web: <https://www.vinc17.net/>
100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/>
Work: CR INRIA - computer arithmetic / Pascaline project (LIP, ENS-Lyon)

Reply via email to