[Bug 172812] Re: crafted pygame input can cause segfault
** Information type changed from Private Security to Public -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/172812 Title: crafted pygame input can cause segfault To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/pyvnc2swf/+bug/172812/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 172812] Re: crafted pygame input can cause segfault
I stil get the error: AttributeError: 'NoneType' object has no attribute 'getCodecID' Is there a fix fond? -- Dominique Ramaekers -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/172812 Title: crafted pygame input can cause segfault To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/pyvnc2swf/+bug/172812/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
Re: [Bug 172812] Re: crafted pygame input can cause segfault
On Wed, Oct 14, 2009 at 5:15 AM, Marc Deslauriers wrote: > Thanks for taking the time to report this bug and helping to make Ubuntu > better. We appreciate the difficulties you are facing, but this appears > to be a "regular" (non-security) bug. I have unmarked it as a security > issue since this bug does not show evidence of allowing attackers to > cross privilege boundaries nor directly cause loss of data/privacy. > Please feel free to report any other bugs you may find. Marc, that is correct. Something appears to have been changed in the code since prior versions that prevent reaching this code in th same fashion. It doesn't mean the vulnerability is non-existent, but I can only reproduce it in prior versions and not the latest release due to uncaught Python exceptions. Perhaps someone will come along here and figure out why later... -- Kristian Erik Hermansen -- crafted pygame input can cause segfault https://bugs.launchpad.net/bugs/172812 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 172812] Re: crafted pygame input can cause segfault
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privilege boundaries nor directly cause loss of data/privacy. Please feel free to report any other bugs you may find. ** Changed in: pyvnc2swf (Ubuntu) Status: New => Confirmed ** This bug is no longer flagged as a security vulnerability -- crafted pygame input can cause segfault https://bugs.launchpad.net/bugs/172812 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 172812] Re: crafted pygame input can cause segfault
I just tested on Ubuntu 9.04 release and get a new error now. """ $ python2.6 /usr/share/pyvnc2swf/edit.py -d -t mpeg -o /tmp/iacrb_prac3.mpg /home/khermans/Desktop/iacrb_prac3.swf Using pygame 1.8.1release Input movie: version=5, size=1024x768, framerate=12fps, frames=2670, duration=222.5s. Output movie size: 1024x768 Scanning source swf file: /home/khermans/Desktop/iacrb_prac3.swf... Creating MPEG: '/tmp/iacrb_prac3.mpg': codec=mpeg2video, size=1024x768, framerate=12.0 Traceback (most recent call last): File "/usr/share/pyvnc2swf/edit.py", line 244, in if __name__ == "__main__": sys.exit(main(sys.argv[1:])) File "/usr/share/pyvnc2swf/edit.py", line 239, in main mp3seek=mp3seek, mp3skip=mp3skip) File "/usr/share/pyvnc2swf/edit.py", line 86, in reorganize builder.build(r) File "/usr/share/pyvnc2swf/output.py", line 999, in build self.start() File "/usr/share/pyvnc2swf/output.py", line 942, in start self.stream.open() File "/usr/share/pyvnc2swf/output.py", line 767, in open 'id': vcodec.getCodecID(self.mpeg_codec), AttributeError: 'NoneType' object has no attribute 'getCodecID' """ ** Changed in: pyvnc2swf (Ubuntu) Status: Invalid => New -- crafted pygame input can cause segfault https://bugs.launchpad.net/bugs/172812 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 172812] Re: crafted pygame input can cause segfault
We are closing this bug report because it lacks the information we need to investigate the problem, as described in the previous comments. Please reopen it if you can give us the missing information, and don't hesitate to submit bug reports in the future. To reopen the bug report you can click on the current status, under the Status column, and change the Status back to "New". Thanks again! ** Changed in: pyvnc2swf (Ubuntu) Status: Incomplete => Invalid -- crafted pygame input can cause segfault https://bugs.launchpad.net/bugs/172812 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 172812] Re: crafted pygame input can cause segfault
Is this symptom still reproducible in 8.10? ** Changed in: pyvnc2swf (Ubuntu) Status: New => Incomplete -- crafted pygame input can cause segfault https://bugs.launchpad.net/bugs/172812 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
Re: [Bug 172812] Re: crafted pygame input can cause segfault
On Thu, Feb 28, 2008 at 12:02 AM, illume <[EMAIL PROTECTED]> wrote: > it's a bug in pymedia, not pygame. This application is using pygame, > a bunch of other libraries and also pymedia. > This is pymedia: pymedia.org > > Pymedia is a separate library from pygame. OK, got it. Then the pyvnc2swf package should be associated with the bug for using a broken pymedia. I believe someone tried the latest pymedia and it was still broken. I placed it on the vnc2swf-users list and it doesn't seem to be resolved yet... > Pygame puts a crash handler in, which is why you see the "Fatal Python > error: (pygame parachute)" part. However most crashes in any library > used by a program will have this message printed. Right, OK... > I'll send this bug on to the pyvnc2swf, and pymedia people so they > know about it. Do you have a pyvnc2swf package? If so associate it > with that. Yes, they should probably be coordinating. pyvnc2swf is in the ubuntu repos. I will change this bug to associate with it... > This bug is miscategorised, please don't associate it with pygame. Cool. So we both agree that it is a bug in the pyvnc2swf package... -- Kristian Erik Hermansen -- "It has been just so in all my inventions. The first step is an intuition--and comes with a burst, then difficulties arise. This thing gives out and then that--'Bugs'--as such little faults and difficulties are called--show themselves and months of anxious watching, study and labor are requisite before commercial success--or failure--is certainly reached" -- Thomas Edison in a letter to Theodore Puskas on November 18, 1878 -- crafted pygame input can cause segfault https://bugs.launchpad.net/bugs/172812 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 172812] Re: crafted pygame input can cause segfault
pygame is merely the crash handler, and not where the bug lies. The pyvnc2swf package should be fixed to include a version of pymedia which resolves the crash on certain input files. ** Changed in: pyvnc2swf (Ubuntu) Sourcepackagename: pygame => pyvnc2swf -- crafted pygame input can cause segfault https://bugs.launchpad.net/bugs/172812 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
Re: [Bug 172812] Re: crafted pygame input can cause segfault
Hi, it's a bug in pymedia, not pygame. This application is using pygame, a bunch of other libraries and also pymedia. This is pymedia: pymedia.org Pymedia is a separate library from pygame. Pygame puts a crash handler in, which is why you see the "Fatal Python error: (pygame parachute)" part. However most crashes in any library used by a program will have this message printed. I'll send this bug on to the pyvnc2swf, and pymedia people so they know about it. Do you have a pyvnc2swf package? If so associate it with that. This bug is miscategorised, please don't associate it with pygame. cheers, On Thu, Feb 28, 2008 at 6:20 PM, Kristian Erik Hermansen <[EMAIL PROTECTED]> wrote: > On Wed, Feb 27, 2008 at 7:44 PM, illume <[EMAIL PROTECTED]> wrote: > > this appears to be a pymedia bug... not a pygame one. > > > > The mpeg creation from the swf is done via pymedia - which is where the > > crash appears to be. > > Hrmm, but I don't see the pymedia package in Ubuntu. Perhaps the > pygame application was package with a broken version of pygame? If > so, I would still consider it a bug in pygame, since that would need > to upgraded and/or fixed. Thoughts? > -- > Kristian Erik Hermansen > -- > "It has been just so in all my inventions. The first step is an > intuition--and comes with a burst, then difficulties arise. This thing > gives out and then that--'Bugs'--as such little faults and > difficulties are called--show themselves and months of anxious > watching, study and labor are requisite before commercial success--or > failure--is certainly reached" -- Thomas Edison in a letter to > Theodore Puskas on November 18, 1878 > > > > -- > crafted pygame input can cause segfault > https://bugs.launchpad.net/bugs/172812 > You received this bug notification because you are a direct subscriber > of the bug. > > Status in Source Package "pygame" in Ubuntu: New > > Bug description: > Binary package hint: python-pygame > > [EMAIL PROTECTED]:~/foss/pyvnc2swf-0.9.3/pyvnc2swf$ python edit.py -d -t > mpeg -o /home/khermans/personal/CEPT/iacrb_prac3.mpg > /home/khermans/personal/CEPT/iacrb_prac3.swf > Using pygame 1.7.1release > Using pymedia 1.3.7.0 > Input movie: version=5, size=1024x768, framerate=12fps, frames=2670, > duration=222.5s. > Output movie size: 1024x768 > Scanning source swf file: /home/khermans/personal/CEPT/iacrb_prac3.swf... > Creating MPEG: '/home/khermans/personal/CEPT/iacrb_prac3.mpg': > codec=mpeg2video, size=1024x768, framerate=12.0 > > .Fatal > Python error: (pygame parachute) Segmentation Fault > Aborted (core dumped) > -- crafted pygame input can cause segfault https://bugs.launchpad.net/bugs/172812 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
Re: [Bug 172812] Re: crafted pygame input can cause segfault
On Wed, Feb 27, 2008 at 7:44 PM, illume <[EMAIL PROTECTED]> wrote: > this appears to be a pymedia bug... not a pygame one. > > The mpeg creation from the swf is done via pymedia - which is where the > crash appears to be. Hrmm, but I don't see the pymedia package in Ubuntu. Perhaps the pygame application was package with a broken version of pygame? If so, I would still consider it a bug in pygame, since that would need to upgraded and/or fixed. Thoughts? -- Kristian Erik Hermansen -- "It has been just so in all my inventions. The first step is an intuition--and comes with a burst, then difficulties arise. This thing gives out and then that--'Bugs'--as such little faults and difficulties are called--show themselves and months of anxious watching, study and labor are requisite before commercial success--or failure--is certainly reached" -- Thomas Edison in a letter to Theodore Puskas on November 18, 1878 -- crafted pygame input can cause segfault https://bugs.launchpad.net/bugs/172812 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 172812] Re: crafted pygame input can cause segfault
hi, this appears to be a pymedia bug... not a pygame one. The mpeg creation from the swf is done via pymedia - which is where the crash appears to be. cheers, -- crafted pygame input can cause segfault https://bugs.launchpad.net/bugs/172812 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 172812] Re: crafted pygame input can cause segfault
** Visibility changed to: Public -- crafted pygame input can cause segfault https://bugs.launchpad.net/bugs/172812 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs