Debian Bug report logs -
#425300
remote crash of amuleweb
Reported by: Jindrich Makovicka <makovick@gmail.com>
Date: Sun, 20 May 2007 19:12:02 UTC
Severity: normal
Found in version amule/2.1.3-2
Fixed in version 2.2.6+debian0-1
Done: Sandro Tosi <morph@debian.org>
Bug is archived. No further changes may be made.
Toggle useless messages
Report forwarded to debian-bugs-dist@lists.debian.org, Adeodato Simó <dato@net.com.org.es>:
Bug#425300; Package amule-daemon.
(full text, mbox, link).
Acknowledgement sent to Jindrich Makovicka <makovick@gmail.com>:
New Bug report received and forwarded. Copy sent to Adeodato Simó <dato@net.com.org.es>.
(full text, mbox, link).
Message #5 received at submit@bugs.debian.org (full text, mbox, reply):
[Message part 1 (text/plain, inline)]
Package: amule-daemon
Version: 2.1.3-2
Severity: grave
Amuleweb does not check if a requested image actually exists. This
means requests like http://localhost:4711/xyzzy.png (but only if the
user is logged in) crash the webserver due to a NULL pointer
dereference.
Fix attached.
--
Jindrich Makovicka
[WebServer.cpp.diff (text/x-patch, attachment)]
Information forwarded to debian-bugs-dist@lists.debian.org, Adeodato Simó <dato@net.com.org.es>:
Bug#425300; Package amule-daemon.
(full text, mbox, link).
Acknowledgement sent to 425300@bugs.debian.org, Adeodato Simó <dato@net.com.org.es>:
Extra info received and forwarded to list. Copy sent to Adeodato Simó <dato@net.com.org.es>.
(full text, mbox, link).
Message #10 received at 425300@bugs.debian.org (full text, mbox, reply):
severity 425300 normal
thanks
* Jindrich Makovicka [Sun, 20 May 2007 21:09:04 +0200]:
> Amuleweb does not check if a requested image actually exists. This
> means requests like http://localhost:4711/xyzzy.png (but only if the
> user is logged in) crash the webserver due to a NULL pointer
> dereference.
Okay, but I'm adjusting the severity of this bug, given that (a) user
must be logged in, and (b) a wrong URL must be provided by hand, which
makes it not happen in the common case.
> Fix attached.
Does this fix come from upstream?
Cheers,
--
Adeodato Simó dato at net.com.org.es
Debian Developer adeodato at debian.org
Man is certainly stark mad; he cannot make a flea, yet he makes gods by the
dozens.
-- Michel de Montaigne
Severity set to `normal' from `grave'
Request was from Adeodato Simó <dato@net.com.org.es>
to control@bugs.debian.org.
(Sun, 20 May 2007 19:24:03 GMT) (full text, mbox, link).
Information forwarded to debian-bugs-dist@lists.debian.org, Adeodato Simó <dato@net.com.org.es>:
Bug#425300; Package amule-daemon.
(full text, mbox, link).
Acknowledgement sent to Jindrich Makovicka <makovick@gmail.com>:
Extra info received and forwarded to list. Copy sent to Adeodato Simó <dato@net.com.org.es>.
(full text, mbox, link).
Message #17 received at 425300@bugs.debian.org (full text, mbox, reply):
On Sun, 20 May 2007 21:22:44 +0200
Adeodato Simó <dato@net.com.org.es> wrote:
> severity 425300 normal
> thanks
>
> * Jindrich Makovicka [Sun, 20 May 2007 21:09:04 +0200]:
>
> > Amuleweb does not check if a requested image actually exists. This
> > means requests like http://localhost:4711/xyzzy.png (but only if the
> > user is logged in) crash the webserver due to a NULL pointer
> > dereference.
>
> Okay, but I'm adjusting the severity of this bug, given that (a) user
> must be logged in, and (b) a wrong URL must be provided by hand, which
> makes it not happen in the common case.
>
> > Fix attached.
>
> Does this fix come from upstream?
No, it's been hand crufted right here, but I didn't check their upstream
or bug trackers if it is already fixed or not.
Regards,
--
Jindrich Makovicka
Information forwarded to debian-bugs-dist@lists.debian.org, Adeodato Simó <dato@net.com.org.es>:
Bug#425300; Package amule-daemon.
(full text, mbox, link).
Acknowledgement sent to "Luís Picciochi Oliveira" <pitxyoki@gmail.com>:
Extra info received and forwarded to list. Copy sent to Adeodato Simó <dato@net.com.org.es>.
(full text, mbox, link).
Message #22 received at 425300@bugs.debian.org (full text, mbox, reply):
[Message part 1 (text/plain, inline)]
This can also happen if a skin is not well formed and uses an image which
can't be displayed. And this happens with the 'chicane' skin which comes
with the amule-common package. On which situations, I can't remember now.
If you want I can try to find it out... When I have the time to...
Regards,
Luís Picciochi
[Message part 2 (text/html, inline)]
Information forwarded to debian-bugs-dist@lists.debian.org, Adeodato Simó <dato@net.com.org.es>:
Bug#425300; Package amule-daemon.
(full text, mbox, link).
Acknowledgement sent to "Luís Picciochi Oliveira" <pitxyoki@gmail.com>:
Extra info received and forwarded to list. Copy sent to Adeodato Simó <dato@net.com.org.es>.
(full text, mbox, link).
Message #27 received at 425300@bugs.debian.org (full text, mbox, reply):
[Message part 1 (text/plain, inline)]
This bug seems to be corrected on the SVN version currently at the
experimental release.
[Message part 2 (text/html, inline)]
Information forwarded
to debian-bugs-dist@lists.debian.org, Debian aMule Team <pkg-amule-devel@lists.alioth.debian.org>:
Bug#425300; Package amule-daemon.
(Wed, 30 Dec 2009 23:36:06 GMT) (full text, mbox, link).
Acknowledgement sent
to Sandro Tosi <morph@debian.org>:
Extra info received and forwarded to list. Copy sent to Debian aMule Team <pkg-amule-devel@lists.alioth.debian.org>.
(Wed, 30 Dec 2009 23:36:06 GMT) (full text, mbox, link).
Message #32 received at 425300@bugs.debian.org (full text, mbox, reply):
Hello,
we recently uploaded in Debian unstable the new upstream release of
aMule: 2.2.6 .
We are contacting you because you reported a bug against aMule and
because we'd like to ask you to verify if your bug still applies to
the 2.2.6 version.
Since some of the bugs we are contacting are really old, there are
chances they were already fixed in a previous version (just for the
reference, Debian stable has version 2.2.1 while Debian testing has
(currently) version 2.2.5).
Your help is appreciated in screening your bug, so we close those that
are already fixed and address those that are not (yet).
Thanks in advance,
Sandro (on behalf of aMule Debian packaging team)
--
Sandro Tosi (aka morph, morpheus, matrixhasu)
My website: http://matrixhasu.altervista.org/
Me at Debian: http://wiki.debian.org/SandroTosi
Message sent on
to Jindrich Makovicka <makovick@gmail.com>:
Bug#425300.
(Wed, 30 Dec 2009 23:39:47 GMT) (full text, mbox, link).
Reply sent
to Sandro Tosi <morph@debian.org>:
You have taken responsibility.
(Sun, 11 Jul 2010 17:12:13 GMT) (full text, mbox, link).
Notification sent
to Jindrich Makovicka <makovick@gmail.com>:
Bug acknowledged by developer.
(Sun, 11 Jul 2010 17:12:13 GMT) (full text, mbox, link).
Message #40 received at 425300-done@bugs.debian.org (full text, mbox, reply):
Version: 2.2.6+debian0-1
Hello,
this bug is fixed in the 2.2.6 codebase, hence I'm closing it.
Regards,
--
Sandro Tosi (aka morph, morpheus, matrixhasu)
My website: http://matrixhasu.altervista.org/
Me at Debian: http://wiki.debian.org/SandroTosi
Bug archived.
Request was from Debbugs Internal Request <owner@bugs.debian.org>
to internal_control@bugs.debian.org.
(Mon, 09 Aug 2010 07:30:47 GMT) (full text, mbox, link).
Send a report that this bug log contains spam.
Debian bug tracking system administrator <owner@bugs.debian.org>.
Last modified:
Sun Jul 2 07:16:12 2023;
Machine Name:
bembo
Debian Bug tracking system
Debbugs is free software and licensed under the terms of the GNU
Public License version 2. The current version can be obtained
from https://bugs.debian.org/debbugs-source/.
Copyright © 1999 Darren O. Benham,
1997,2003 nCipher Corporation Ltd,
1994-97 Ian Jackson,
2005-2017 Don Armstrong, and many other contributors.
