Debian Bug report logs - #522080
irssi segfaults when joining any channel

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Norbert Veber <nveber@pyre.virge.net>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: irssi segfaults when joining any channel

Date: Tue, 31 Mar 2009 12:18:07 -0400

Package: irssi-plugin-silc
Version: 1.1.4-1+b1
Severity: grave

The plugin is currently unusable because it causes irssi to crash when
you try to join any channel.

To reproduce, run irssi
/LOAD silc
/CONNECT -silcnet SILCNet silc.silcnet.org
/JOIN silcSegmentation fault

-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.26-1-686 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages irssi-plugin-silc depends on:
ii  irssi                       0.8.13~rc1-1 terminal based IRC client
ii  libc6                       2.9-6        GNU C Library: Shared libraries
ii  perl                        5.10.0-19    Larry Wall's Practical Extraction 
ii  perl-base [perlapi-5.10.0]  5.10.0-19    minimal Perl system

irssi-plugin-silc recommends no packages.

Versions of packages irssi-plugin-silc suggests:
pn  libfile-mmagic-perl           <none>     (no description available)
ii  libfile-temp-perl             0.20-1     provides functions for generating 
ii  libio-stringy-perl            2.110-4    Perl modules for IO from scalars a
ii  libmailtools-perl             2.04-1     Manipulate email in perl programs
ii  libmime-perl                  5.427-2    transitional dummy package
ii  libmime-tools-perl [libmime-p 5.427-2    Perl5 modules for MIME-compliant m
ii  perl-modules [libfile-temp-pe 5.10.0-19  Core Perl modules

-- no debconf information

Message #8 received at 522080-submitter@bugs.debian.org (full text, mbox, reply):

From: Patrick Schoenfeld <schoenfeld@debian.org>

To: pkg-silc-devel@lists.alioth.debian.org, team@security.debian.org, debian-release@lists.debian.org

Cc: 522080-submitter@bugs.debian.org

Subject: irssi-plugin-silc unusable in Debian Lenny and embedded code copy

Date: Tue, 2 Jun 2009 14:10:40 +0200

[Message part 1 (text/plain, inline)]

Hi,

recently I've noticed that irssi-plugin-silc does not work with the
irssi in Lenny. The problem is that it segfaults when used with the
irssi version in Lenny. There is also a bug report for this on [1].
Because a group of people, which I'm part of, wanted to migrate from an
IRC channel to SILC we noticed this and investigated further.
The person who worked on this noticed that the source package of
irssi-plugin-silc uses an embedded code copy of irssi 0.8.11, which is
used to build the irssi plugin. Unfortunately the code where the
segfault appearently happens has been changed in more recent irssi
versions, so the segfault is... understandable.

So we basically have two problems, where one is one that the security
team should be aware of it (I don't know if they are, so I CC'ed you).

1. Segmentation faults when using irssi-plugin-silc in Lenny
(which basically makes it release _unsuitable_)

2. Code copy of irssi 0.8.11 in silc-client-1.1.4 source package
(apps/irssi) [relevant for sec. team]

Well, the patch is obvious. Fix the plugin to work against the version
in lenny. There has been some work done over in OpenBSD, one should look
at this [2] when fixing it.

Now remaining is the question: What should happen?
In my opinion the SILC team should either coordinate a fix with the
release team quickly or the package should be RM'd.

Best Regards,
Patrick

[1] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=522080
[2] http://openports.se/net/irssi-silc

[signature.asc (application/pgp-signature, inline)]

Message #13 received at 522080-quiet@bugs.debian.org (full text, mbox, reply):

From: Jérémy Bobbio <lunar@debian.org>

To: Patrick Schoenfeld <schoenfeld@debian.org>, 522080-quiet@bugs.debian.org

Cc: pkg-silc-devel@lists.alioth.debian.org, team@security.debian.org, debian-release@lists.debian.org, 522080-submitter@bugs.debian.org

Subject: Re: Bug#522080: irssi-plugin-silc unusable in Debian Lenny and embedded code copy

Date: Sun, 7 Jun 2009 13:53:40 +0200

[Message part 1 (text/plain, inline)]

On Tue, Jun 02, 2009 at 02:10:40PM +0200, Patrick Schoenfeld wrote:
> recently I've noticed that irssi-plugin-silc does not work with the
> irssi in Lenny. The problem is that it segfaults when used with the
> irssi version in Lenny. There is also a bug report for this on [1].

I have not been able to reproduce this issue in _Lenny_.  With
irssi/0.8.12-6 and irssi-plugin-silc/1.1.4-1+b1 on amd64 and i386, the
plugin worked fine. 

I do confirm #522080 on testing and unstable though: the plugin does
segfault when used with irssi 0.8.13.

If you are using irssi/0.8.13-1~bpo50+1 from backports.org, the segfault
probably does happen as well, but this does not concern the status of
irssi-plugin-silc in Lenny: backports.org is unrelated to Debian
official stable releases.

> The person who worked on this noticed that the source package of
> irssi-plugin-silc uses an embedded code copy of irssi 0.8.11, which is
> used to build the irssi plugin.

The "official" silc client (delivered in the silc binary package) is a
fork of irssi.  If the security team thinks this is bad enough, we can
stop providing the silc binary package.

The irssi plugin is currently built from the same headers.  Building it
using irssi-dev is the proper fix for #522080.  I will spend some time
working on this soon.

Cheers,
-- 
Jérémy Bobbio                        .''`. 
lunar@debian.org                    : :Ⓐ  :  # apt-get install anarchism
                                    `. `'` 
                                      `-   

[signature.asc (application/pgp-signature, inline)]

Message #23 received at 522080-close@bugs.debian.org (full text, mbox, reply):

From: Jérémy Bobbio <lunar@debian.org>

To: 522080-close@bugs.debian.org

Subject: Bug#522080: fixed in silc-client 1.1.7-1

Date: Fri, 24 Jul 2009 23:00:18 +0000

Source: silc-client
Source-Version: 1.1.7-1

We believe that the bug you reported is fixed in the latest version of
silc-client, which is due to be installed in the Debian FTP archive:

irssi-plugin-silc-dbg_1.1.7-1_i386.deb
  to pool/main/s/silc-client/irssi-plugin-silc-dbg_1.1.7-1_i386.deb
irssi-plugin-silc_1.1.7-1_i386.deb
  to pool/main/s/silc-client/irssi-plugin-silc_1.1.7-1_i386.deb
silc-client_1.1.7-1.diff.gz
  to pool/main/s/silc-client/silc-client_1.1.7-1.diff.gz
silc-client_1.1.7-1.dsc
  to pool/main/s/silc-client/silc-client_1.1.7-1.dsc
silc-client_1.1.7.orig.tar.gz
  to pool/main/s/silc-client/silc-client_1.1.7.orig.tar.gz
silc_1.1.7-1_all.deb
  to pool/main/s/silc-client/silc_1.1.7-1_all.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 522080@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Jérémy Bobbio <lunar@debian.org> (supplier of updated silc-client package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Fri, 26 Jun 2009 15:14:26 +0200
Source: silc-client
Binary: irssi-plugin-silc irssi-plugin-silc-dbg silc
Architecture: source i386 all
Version: 1.1.7-1
Distribution: unstable
Urgency: low
Maintainer: Debian SILC Team <pkg-silc-devel@lists.alioth.debian.org>
Changed-By: Jérémy Bobbio <lunar@debian.org>
Description: 
 irssi-plugin-silc - SILC plugin for irssi
 irssi-plugin-silc-dbg - debug symbols for the SILC plugin for irssi
 silc       - transitional package for the SILC client
Closes: 448186 476177 482145 522080
Changes: 
 silc-client (1.1.7-1) unstable; urgency=low
 .
   [ Jérémy Bobbio ]
   * New upstream release:
     - Fix crash on expired keyboard prompts.  (Closes: #482145)
   * Update Vcs-* field and document Git usage in README.source.
   * Update watch file.
   * Build-Depends on libsilc-dev instead of libsilc-1.1-2-dev, as provided by
     silc-toolkit 1.1.9-1.
   * Since Debian Policy 3.8.0, embedded code copy are officially not allowed in
     Debian anymore.  As it was a minor fork of irssi, the silc package
     providing the official SILC client has been discontinued.
   * Use a custom build system for the irssi plugin.  We now Build-Depends on
     irssi-dev instead of relying on irssi embedded code copy.
     (Closes: #448186, #522080)
   * Remove extra symlinks for irssi plugin.  (Closes: #476177)
   * Ship the silc package as a transitional package which depends
     on irssi and irssi-plugin-silc and contains a NEWS file.
   * Bump Standards-Version to 3.8.2, no further changes required.
 .
   [ Daniel Kahn Gillmor ]
   * cleaned up debian/control: thanks, Lintian!
 .
   [ Micah Anderson ]
   * Changed installation of upstream CHANGES to ChangeLog
   * Added debugging symbols package irssi-plugin-silc-dbg
Checksums-Sha1: 
 4c2b4155f0eeb90d1910f81d0c96f4544b26ef18 1346 silc-client_1.1.7-1.dsc
 9f86fc0e774acde43a28ffd9f271f8dc5bbc133b 1999852 silc-client_1.1.7.orig.tar.gz
 254f5b95563bffc771fc10ee027c75d15f88e492 12512 silc-client_1.1.7-1.diff.gz
 5dd9e08193758ba87ce0ba63d6a3c7ab3fd0257f 134916 irssi-plugin-silc_1.1.7-1_i386.deb
 5e561d960867ee5b50243c5c74ccb5f4c7426633 200220 irssi-plugin-silc-dbg_1.1.7-1_i386.deb
 8d55e898c657eb6966a69fdc6c24973ed36bacfb 11412 silc_1.1.7-1_all.deb
Checksums-Sha256: 
 94695b008b79d1177eae2e83fb3d9146620e0bd7534462446ecb20a968c6fa30 1346 silc-client_1.1.7-1.dsc
 2d9b9099550a475648260b713b9192d28656230d71d9fab12798df6ab4c2f9ad 1999852 silc-client_1.1.7.orig.tar.gz
 a7bc7e4cd6e87fb3e77dbae2d7372c49b995e95c04e644cb947165fb9379d25f 12512 silc-client_1.1.7-1.diff.gz
 e125388a1d03ffc6c41e9e33f3018b28a08f09becec5149a1473d6d6e47e2880 134916 irssi-plugin-silc_1.1.7-1_i386.deb
 d2653114e7fd7b2eb1a0c2b17e632c47b904e9f4762b7bc75550a549f1fbb0e7 200220 irssi-plugin-silc-dbg_1.1.7-1_i386.deb
 84b130ba4e49d47d78d5f296cf30953a722c626c1106af991e463a5a73f5fe98 11412 silc_1.1.7-1_all.deb
Files: 
 7f89e4f0b1b2c9d7fcc485971d754f64 1346 net optional silc-client_1.1.7-1.dsc
 1f92de53ea0e7a578210988620af97b2 1999852 net optional silc-client_1.1.7.orig.tar.gz
 f1fda9d3229cb9f3e35ee12f5a95f67f 12512 net optional silc-client_1.1.7-1.diff.gz
 fc8ba0001c5d6d392dcff07eee78655f 134916 net optional irssi-plugin-silc_1.1.7-1_i386.deb
 bb2e9c2d8b3c95b77f96f543ca5a1ef0 200220 debug extra irssi-plugin-silc-dbg_1.1.7-1_i386.deb
 d448dfad1c7e2b5252c5fc1941073f8b 11412 net optional silc_1.1.7-1_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAkpotbQACgkQ2PUjs9fQ72VnlQCgl+nNrL+uqgdgz0zeGxQ720te
+lcAoJdfqM8FMqJC3mBimbtCv7o8QMIn
=EdAz
-----END PGP SIGNATURE-----

Message #28 received at 522080@bugs.debian.org (full text, mbox, reply):

From: Michael Ole Olsen <mio@rlogin.dk>

To: 522080@bugs.debian.org

Subject: Debian Lenny, cannot reproduce

Date: Thu, 3 Feb 2011 03:46:38 +0100

Hello, I tried to reproduce the bug in dist-upgraded Lenny today

But doesn't segfault after doing:
/LOAD silc
/CONNECT -silcnet SILCNet silc.silcnet.org
/JOIN silcSegmentation fault

2.6.30.1 kernel
else only stable packages and no other things loaded in irssi.

Send a report that this bug log contains spam.