Debian Bug report logs - #305634
quintuple-agent: agpg crashes

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Miles Bader <miles@lsi.nec.co.jp>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: quintuple-agent: agpg crashes

Date: Thu, 21 Apr 2005 15:57:26 +0900

Package: quintuple-agent
Version: 1.0.4-5
Severity: important



Here's a log:

   $ echo 'foo' | agpg --batch --quiet --clearsign -
   *** glibc detected *** malloc(): memory corruption: 0x0804c2c0 ***
   $ echo $?
   1


This happens after it has prompted for the password using q-client; that
part seems to work.  :-)

Not sure what other info I can provide...

Thanks,

-Miles


-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable'), (101, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.6.11
Locale: LANG=ja_JP.UTF-8, LC_CTYPE=ja_JP.UTF-8 (charmap=UTF-8)

Versions of packages quintuple-agent depends on:
ii  libc6                   2.3.5-1          GNU C Library: Shared libraries an
ii  libcap2                 0.cvs.20010529-4 Support for POSIX.1e capabilities
ii  libglib1.2              1.2.10-9         The GLib library of C routines
ii  libgtk1.2               1.2.10-17        The GIMP Toolkit set of widgets fo
ii  libx11-6                6.8.2-10         X Window System protocol client li
ii  libxext6                6.8.2-10         X Window System miscellaneous exte
ii  libxi6                  6.8.2-10         X Window System Input extension li
ii  xlibs                   6.8.2-10         X Window System client libraries m

-- no debconf information

Message #10 received at 305634@bugs.debian.org (full text, mbox, reply):

From: LaMont Jones <lamont@debian.org>

To: 305634@bugs.debian.org

Cc: control@bugs.debian.org

Subject: Re: Bug#305634: quintuple-agent: agpg crashes

Date: Mon, 9 May 2005 19:13:32 -0600

tags 305634 + patch
--

The issue is that the arglist is overrun by one argument.  The patch
below (and at http://patches.ubuntu.com/patches/quintuple-agent.malloc.patch)
fixes the problem.

lamont
diff -ur quintuple-agent-1.0.4-5/agpg.c quintuple-agent-1.0.4/agpg.c
--- quintuple-agent-1.0.4-5/agpg.c	2002-09-28 01:16:01.000000000 -0600
+++ quintuple-agent-1.0.4/agpg.c	2005-05-09 19:04:56.000000000 -0600
@@ -175,7 +175,7 @@
     int i;
 
     close(p[1]);
-    args = malloc(sizeof(char *) * (argc + 2));
+    args = malloc(sizeof(char *) * (argc + 3));
     if (!args) {
       fprintf(stderr, _("out of memory\n"));
       return EXIT_FAILURE;

Message #17 received at 305634@bugs.debian.org (full text, mbox, reply):

From: Norbert Tretkowski <tretkowski@inittab.de>

To: LaMont Jones <lamont@debian.org>, 305634@bugs.debian.org

Cc: control@bugs.debian.org

Subject: Re: Bug#305634: quintuple-agent: agpg crashes

Date: Tue, 10 May 2005 11:23:51 +0200

tags 305634 +pending
thanks

* LaMont Jones wrote:
> The issue is that the arglist is overrun by one argument.  The patch
> below (and at http://patches.ubuntu.com/patches/quintuple-agent.malloc.patch)
> fixes the problem.

Thanks for that patch, I included it and upload 1.0.4-6 later today.

Norbert

Message #24 received at 305634-close@bugs.debian.org (full text, mbox, reply):

From: Norbert Tretkowski <nobse@debian.org>

To: 305634-close@bugs.debian.org

Subject: Bug#305634: fixed in quintuple-agent 1.0.4-6

Date: Tue, 10 May 2005 12:47:29 -0400

Source: quintuple-agent
Source-Version: 1.0.4-6

We believe that the bug you reported is fixed in the latest version of
quintuple-agent, which is due to be installed in the Debian FTP archive:

quintuple-agent_1.0.4-6.diff.gz
  to pool/main/q/quintuple-agent/quintuple-agent_1.0.4-6.diff.gz
quintuple-agent_1.0.4-6.dsc
  to pool/main/q/quintuple-agent/quintuple-agent_1.0.4-6.dsc
quintuple-agent_1.0.4-6_i386.deb
  to pool/main/q/quintuple-agent/quintuple-agent_1.0.4-6_i386.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 305634@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Norbert Tretkowski <nobse@debian.org> (supplier of updated quintuple-agent package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Tue, 10 May 2005 11:59:26 +0200
Source: quintuple-agent
Binary: quintuple-agent
Architecture: source i386
Version: 1.0.4-6
Distribution: unstable
Urgency: medium
Maintainer: Norbert Tretkowski <nobse@debian.org>
Changed-By: Norbert Tretkowski <nobse@debian.org>
Description: 
 quintuple-agent - secure store for secrets (passphrases, etc.)
Closes: 305634
Changes: 
 quintuple-agent (1.0.4-6) unstable; urgency=medium
 .
   * Added a patch from LaMont Jones, which fixes a memory corruption crash in
     agpg.c. (closes: #305634)
Files: 
 85394f12dfce81898154fe0fb252fc37 796 utils extra quintuple-agent_1.0.4-6.dsc
 6430666a49c9fe1b3489a2c364ab1ab3 16001 utils extra quintuple-agent_1.0.4-6.diff.gz
 66fb8c8c45f860d5676942b6a0b832b8 82242 utils extra quintuple-agent_1.0.4-6_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFCgOHKr/RnCw96jQERAsx9AJsFCNps7DIXYXVFss9judLZ4zwyOgCfW9vL
P631efJYdOQAbmkBvEAiEDA=
=t4Cl
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.