Debian Bug report logs - #438689
findutils: Find crashes with empty PATH

version graph

Package: findutils; Maintainer for findutils is Andreas Metzler <ametzler@debian.org>; Source for findutils is src:findutils (PTS, buildd, popcon).

Reported by: Reuben Thomas <rrt@sc3d.org>

Date: Sun, 19 Aug 2007 00:24:01 UTC

Severity: normal

Found in version findutils/4.2.31-1

Fixed in versions findutils/4.3.11-1, findutils/4.4.0-1

Done: Andreas Metzler <ametzler@debian.org>

Bug is archived. No further changes may be made.

Forwarded to http://savannah.gnu.org/bugs/?20834

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, Andreas Metzler <ametzler@debian.org>:
Bug#438689; Package findutils. (full text, mbox, link).


Acknowledgement sent to Reuben Thomas <rrt@sc3d.org>:
New Bug report received and forwarded. Copy sent to Andreas Metzler <ametzler@debian.org>. (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Reuben Thomas <rrt@sc3d.org>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: findutils: Find crashes with empty PATH
Date: Sun, 19 Aug 2007 01:21:06 +0100
Package: findutils
Version: 4.2.31-1
Severity: normal

Because find refuses to run -execdir with . in PATH, I tried the
following:

unset PATH; /usr/bin/find /tmp -execdir /bin/echo {} \;

but it segfaults. If I set PATH to, for example, /bin:/usr/bin, it
works as expected.
-- System Information:
Debian Release: lenny/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)

Kernel: Linux 2.6.21-2-686 (SMP w/1 CPU core)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages findutils depends on:
ii  libc6                         2.6-2      GNU C Library: Shared libraries

findutils recommends no packages.

-- no debconf information



Noted your statement that Bug has been forwarded to http://savannah.gnu.org/bugs/?20834. Request was from Andreas Metzler <ametzler@debian.org> to control@bugs.debian.org. (Sun, 19 Aug 2007 08:00:02 GMT) (full text, mbox, link).


Message sent on to Reuben Thomas <rrt@sc3d.org>:
Bug#438689. (full text, mbox, link).


Message #10 received at 438689-submitter@bugs.debian.org (full text, mbox, reply):

From: Andreas Metzler <INVALID.NOREPLY@gnu.org>
To: Andreas Metzler <gnu@downhill.at.eu.org>, 438689-submitter@bugs.debian.org, bug-findutils@gnu.org
Subject: [bug #20834] find -execdir segfaults if PATH is not set.
Date: Sun, 19 Aug 2007 07:58:18 +0000
URL:
  <http://savannah.gnu.org/bugs/?20834>

                 Summary: find -execdir segfaults if PATH is not set.
                 Project: findutils
            Submitted by: ametzler
            Submitted on: Sonntag 19.08.2007 um 09:58
                Category: find
                Severity: 3 - Normal
              Item Group: Wrong result
                  Status: None
                 Privacy: Public
             Assigned to: None
         Originator Name: 
        Originator Email: 
             Open/Closed: Open
         Discussion Lock: Any
                 Release: None
           Fixed Release: None

    _______________________________________________________

Details:

This is http://bugs.debian.org/438689 submitted by Reuben Thomas.

This causes a segfault:
env -u PATH find /tmp -exedir /bin/echo \;

The bug applies to both 4.2.x and 4.3.x and is caused by this code in
parser.c:

-----------------------
static void 
check_path_safety(const char *action, char **argv)
{
  const char *path = getenv("PATH");
  char *s;

  (void)argv;
  
  s = next_element(path, 1);
-----------------------

Invoking next_element with NULL is only supposed to happen if it has been
called before with non-NULL argument to initialize path.

cu andreas




    _______________________________________________________

Reply to this item at:

  <http://savannah.gnu.org/bugs/?20834>

_______________________________________________
  Nachricht geschickt von/durch Savannah
  http://savannah.gnu.org/




Message sent on to Reuben Thomas <rrt@sc3d.org>:
Bug#438689. (full text, mbox, link).


Message #13 received at 438689-submitter@bugs.debian.org (full text, mbox, reply):

From: James Youngman <INVALID.NOREPLY@gnu.org>
To: James Youngman <jay@gnu.org>, 438689-submitter@bugs.debian.org, bug-findutils@gnu.org
Subject: [bug #20834] find -execdir segfaults if PATH is not set.
Date: Sun, 19 Aug 2007 15:31:16 +0000
Update of bug #20834 (project findutils):

                  Status:                    None => In Progress            
             Assigned to:                    None => jay                    
                 Release:                    None => 4.2.31                 


    _______________________________________________________

Reply to this item at:

  <http://savannah.gnu.org/bugs/?20834>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.gnu.org/




Message sent on to Reuben Thomas <rrt@sc3d.org>:
Bug#438689. (full text, mbox, link).


Message #16 received at 438689-submitter@bugs.debian.org (full text, mbox, reply):

From: James Youngman <INVALID.NOREPLY@gnu.org>
To: James Youngman <jay@gnu.org>, 438689-submitter@bugs.debian.org, bug-findutils@gnu.org
Subject: [bug #20834] find -execdir segfaults if PATH is not set.
Date: Thu, 23 Aug 2007 09:03:49 +0000
Update of bug #20834 (project findutils):

                  Status:             In Progress => Fixed                  


    _______________________________________________________

Reply to this item at:

  <http://savannah.gnu.org/bugs/?20834>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.gnu.org/




Message sent on to Reuben Thomas <rrt@sc3d.org>:
Bug#438689. (full text, mbox, link).


Message #19 received at 438689-submitter@bugs.debian.org (full text, mbox, reply):

From: James Youngman <INVALID.NOREPLY@gnu.org>
To: James Youngman <jay@gnu.org>, 438689-submitter@bugs.debian.org, bug-findutils@gnu.org
Subject: [bug #20834] find -execdir segfaults if PATH is not set.
Date: Sun, 11 Nov 2007 19:48:11 +0000
Update of bug #20834 (project findutils):

             Open/Closed:                    Open => Closed                 
           Fixed Release:                    None => 4.3.9                  


    _______________________________________________________

Reply to this item at:

  <http://savannah.gnu.org/bugs/?20834>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.gnu.org/





Reply sent to Andreas Metzler <ametzler@debian.org>:
You have taken responsibility. (full text, mbox, link).


Notification sent to Reuben Thomas <rrt@sc3d.org>:
Bug acknowledged by developer. (full text, mbox, link).


Message #24 received at 438689-close@bugs.debian.org (full text, mbox, reply):

From: Andreas Metzler <ametzler@debian.org>
To: 438689-close@bugs.debian.org
Subject: Bug#438689: fixed in findutils 4.3.11-1
Date: Sun, 02 Dec 2007 16:02:04 +0000
Source: findutils
Source-Version: 4.3.11-1

We believe that the bug you reported is fixed in the latest version of
findutils, which is due to be installed in the Debian FTP archive:

findutils_4.3.11-1.diff.gz
  to pool/main/f/findutils/findutils_4.3.11-1.diff.gz
findutils_4.3.11-1.dsc
  to pool/main/f/findutils/findutils_4.3.11-1.dsc
findutils_4.3.11-1_i386.deb
  to pool/main/f/findutils/findutils_4.3.11-1_i386.deb
findutils_4.3.11.orig.tar.gz
  to pool/main/f/findutils/findutils_4.3.11.orig.tar.gz
locate_4.3.11-1_i386.deb
  to pool/main/f/findutils/locate_4.3.11-1_i386.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 438689@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Andreas Metzler <ametzler@debian.org> (supplier of updated findutils package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Sun,  2 Dec 2007 16:14:34 +0100
Source: findutils
Binary: locate findutils
Architecture: source i386
Version: 4.3.11-1
Distribution: experimental
Urgency: low
Maintainer: Andreas Metzler <ametzler@debian.org>
Changed-By: Andreas Metzler <ametzler@debian.org>
Description: 
 findutils  - utilities for finding files--find, xargs
 locate     - maintain and query an index of a directory tree
Closes: 336078 438689 453002 453078 453490
Changes: 
 findutils (4.3.11-1) experimental; urgency=low
 .
   * unreleased
   * New upstream version.
     + GPLv3+. Update debian/copyright.
     + includes fix for savannah #20139: find -[acm]time -N (wrongly) includes
       files from N days ago, as well as (correctly) from less than N days ago.
     + POSIX is going to or has already standardized -[i]path. Stop throwing a
       warning sugging to use -[i]wholename instead. Closes: #336078
     + find -execdir will not segfault if PATH is not set. Closes: #438689
   * Add a note about the separate locate package to findutils' NEWS.Debian.
     README.Debian only talks about locate. Move it to the correct package,
     update contents. Closes: #453002
   * locate needs a Replaces: findutils (<< 4.2.31-2), since the helper
     binaries in /usr/lib/locate/ are shipped in both packages. Closes: #453078
   * Rename /etc/cron.daily/find to /etc/cron.daily/locate. Use "export foo
     bar" instead of "export foo ; export bar". (Thanks, jidanni).
     Closes: #453490
Files: 
 01d108edfc1f21e2b9c8d0e157185d73 671 utils required findutils_4.3.11-1.dsc
 fcdd89876e2c9a9b810b25908d6085e5 2050527 utils required findutils_4.3.11.orig.tar.gz
 ab139a65a6bf6a04fbc84416c63e1e9d 24534 utils required findutils_4.3.11-1.diff.gz
 9ce2df00009939db2ec4d79438cc9384 533628 utils required findutils_4.3.11-1_i386.deb
 8538427d72e016afd35b631cf333adb7 150882 utils optional locate_4.3.11-1_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFHUtM4HTOcZYuNdmMRAkAtAKCWA15WRfTFfyKdal+dfdscu2jbBgCfbACJ
3Bl8YtoTJeBgclZqh08fcGs=
=eKYS
-----END PGP SIGNATURE-----





Reply sent to Andreas Metzler <ametzler@debian.org>:
You have taken responsibility. (full text, mbox, link).


Notification sent to Reuben Thomas <rrt@sc3d.org>:
Bug acknowledged by developer. (full text, mbox, link).


Message #29 received at 438689-close@bugs.debian.org (full text, mbox, reply):

From: Andreas Metzler <ametzler@debian.org>
To: 438689-close@bugs.debian.org
Subject: Bug#438689: fixed in findutils 4.4.0-1
Date: Sat, 15 Mar 2008 18:32:03 +0000
Source: findutils
Source-Version: 4.4.0-1

We believe that the bug you reported is fixed in the latest version of
findutils, which is due to be installed in the Debian FTP archive:

findutils_4.4.0-1.diff.gz
  to pool/main/f/findutils/findutils_4.4.0-1.diff.gz
findutils_4.4.0-1.dsc
  to pool/main/f/findutils/findutils_4.4.0-1.dsc
findutils_4.4.0-1_i386.deb
  to pool/main/f/findutils/findutils_4.4.0-1_i386.deb
findutils_4.4.0.orig.tar.gz
  to pool/main/f/findutils/findutils_4.4.0.orig.tar.gz
locate_4.4.0-1_i386.deb
  to pool/main/f/findutils/locate_4.4.0-1_i386.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 438689@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Andreas Metzler <ametzler@debian.org> (supplier of updated findutils package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Sat, 15 Mar 2008 16:26:43 +0100
Source: findutils
Binary: findutils locate
Architecture: source i386
Version: 4.4.0-1
Distribution: unstable
Urgency: low
Maintainer: Andreas Metzler <ametzler@debian.org>
Changed-By: Andreas Metzler <ametzler@debian.org>
Description: 
 findutils  - utilities for finding files--find, xargs
 locate     - maintain and query an index of a directory tree
Closes: 21084 291419 336078 354384 370057 403823 438689 460733 470308
Changes: 
 findutils (4.4.0-1) unstable; urgency=low
 .
   * New upstream stable version.
     + Some fixes for the texinfo manuals. (Closes: #470308)
   * First upload to unstable, close bugs fixed by previous uploads to
     experimental:
     + POSIX is going to or has already standardized -[i]path. Stop throwing a
       warning sugging to use -[i]wholename instead. Closes: #336078
     + Better error message if the second operand of a binary operator is
       missing. (Closes: #403823)
     + #22056: -Xtime tests are off by one second (e.g. rm -f x; touch x;
       find x -mtime 0 should print x). Closes: #460733
     + If locatedb is old show actual age in warning mesage instead of just
       saying "more than 8 days old". (Closes: #354384)
     + Do not show warnings about argument ordering if -nowarn is specified.
       (Closes: #370057)
     + find -execdir will not segfault if PATH is not set. Closes: #438689
     + Different error message on 'find ""'. (Closes: #21084)
     + Support for *BSDs -newerXY tests allows to find files with a date in the
       future without generating a temporary file. "find -newermt 2007-07-07"
       (Closes: #291419)
   * Stop trying to install removed README-alpha.
   * Point watchfile to ftp.gnu.org instead of alpha.gnu.org.
   * Use doc-base section "File Management", since Apps/Tools is gone.
   * Only run $(MAKE) distclean if Makefile exists.
   * Symlink find(1) to oldfind(1) manpage.
Files: 
 3b692103c11b50aab7e2338c3fca4342 837 utils required findutils_4.4.0-1.dsc
 49e769ac4382fae6f104f99d54d0a112 2029809 utils required findutils_4.4.0.orig.tar.gz
 844f8edeeeae48ec460a9bab834bd39d 19810 utils required findutils_4.4.0-1.diff.gz
 41fba4255813bb70b7bd0b24b441f73b 541112 utils required findutils_4.4.0-1_i386.deb
 e497e231914a043e1f998dbe4760bb41 148844 utils optional locate_4.4.0-1_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFH3BN5HTOcZYuNdmMRAkZrAKCJsCs0rSuUvweoReMRSjJHkovgyACfa1Yj
TjKdUEmEPPoyxLmASoJp2HE=
=q6pf
-----END PGP SIGNATURE-----





Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Mon, 27 Apr 2009 07:39:17 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Sat Dec 23 16:49:51 2023; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.