Debian Bug report logs - #592020
openarena-server: game logic crashes on some player quit/death events

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Simon McVittie <smcv@debian.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: openarena-server: game logic crashes on some player quit/death events

Date: Sat, 7 Aug 2010 00:23:24 +0100

[Message part 1 (text/plain, inline)]

Package: openarena-server
Version: 0.8.5-2
Severity: important
Tags: upstream patch pending

When a player is killed or leaves the server before the "enemy" struct member
has been set, the openarena game logic can dereference an invalid pointer and
(at least when running as native code) crash.

This is most easily reproduced by running a dedicated server, joining it with
a client, and leaving immediately. The departing player is counted as a
suicide and the dedicated server crashes.

This can be fixed by applying an upstream patch from after the 0.8.5 release;
see attached.

    Simon

-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (500, 'stable'), (101, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-5-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages openarena depends on:
ii  libc6                   2.11.2-2         Embedded GNU C Library: Shared lib
ii  libcurl3-gnutls         7.21.0-1         Multi-protocol file transfer libra
ii  libgl1-mesa-glx [libgl1 7.7.1-4          A free implementation of the OpenG
ii  libogg0                 1.2.0~dfsg-1     Ogg bitstream library
ii  libopenal1              1:1.12.854-2     Software implementation of the Ope
ii  libsdl1.2debian         1.2.14-6         Simple DirectMedia Layer
ii  libspeex1               1.2~rc1-1        The Speex codec runtime library
ii  libspeexdsp1            1.2~rc1-1        The Speex extended runtime library
ii  libvorbis0a             1.3.1-1          The Vorbis General Audio Compressi
ii  libvorbisfile3          1.3.1-1          The Vorbis General Audio Compressi
ii  openarena-data          0.8.5-2          OpenArena game data
ii  openarena-server        0.8.5-3          server and game logic for the game
ii  zlib1g                  1:1.2.3.4.dfsg-3 compression library - runtime

openarena recommends no packages.

openarena suggests no packages.

-- no debconf information

[0039-Used-self-enemy-before-it-was-initialized.-Might-hav.patch (text/x-diff, attachment)]

Message #10 received at 592020-close@bugs.debian.org (full text, mbox, reply):

From: Simon McVittie <smcv@debian.org>

To: 592020-close@bugs.debian.org

Subject: Bug#592020: fixed in openarena 0.8.5-3

Date: Sun, 08 Aug 2010 12:32:27 +0000

Source: openarena
Source-Version: 0.8.5-3

We believe that the bug you reported is fixed in the latest version of
openarena, which is due to be installed in the Debian FTP archive:

openarena-server_0.8.5-3_amd64.deb
  to main/o/openarena/openarena-server_0.8.5-3_amd64.deb
openarena_0.8.5-3.debian.tar.gz
  to main/o/openarena/openarena_0.8.5-3.debian.tar.gz
openarena_0.8.5-3.dsc
  to main/o/openarena/openarena_0.8.5-3.dsc
openarena_0.8.5-3_amd64.deb
  to main/o/openarena/openarena_0.8.5-3_amd64.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 592020@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Simon McVittie <smcv@debian.org> (supplier of updated openarena package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Sun, 08 Aug 2010 11:53:58 +0100
Source: openarena
Binary: openarena openarena-server
Architecture: source amd64
Version: 0.8.5-3
Distribution: unstable
Urgency: medium
Maintainer: Debian Games Team <pkg-games-devel@lists.alioth.debian.org>
Changed-By: Simon McVittie <smcv@debian.org>
Description: 
 openarena  - fast-paced 3D first-person shooter
 openarena-server - server and game logic for the game OpenArena
Closes: 592020
Changes: 
 openarena (0.8.5-3) unstable; urgency=medium
 .
   * Add patch from oax r203 to fix server crashes if a player joins, then
     rapidly leaves or dies (Closes: #592020)
Checksums-Sha1: 
 ad27078f6feed521415baa02c779a02857dfe654 2063 openarena_0.8.5-3.dsc
 b6b35e0c2c060044adc14fbe764bc80f38a46837 238588 openarena_0.8.5-3.debian.tar.gz
 bb3252661675a61ee42165aa3006c90b35f4eb07 927202 openarena_0.8.5-3_amd64.deb
 a6cd306dfbb7770665cb37109919f1a5b7356a52 2002414 openarena-server_0.8.5-3_amd64.deb
Checksums-Sha256: 
 4948624723898020591593f7f2ee06d98c83972f2da553091629c10f9a5bf307 2063 openarena_0.8.5-3.dsc
 a2fe820f37803323b2e9d5e11da3f7ad2615147f396ef0e5c6576d8434069d67 238588 openarena_0.8.5-3.debian.tar.gz
 ee650a4e31fb87e2bec38a76c8a83cd59a7b748526fd30520493ee1df1f1da7a 927202 openarena_0.8.5-3_amd64.deb
 e4797a0e0eb71a1de58686728a95d6396ad6205dc517abc85864cb5d20618c46 2002414 openarena-server_0.8.5-3_amd64.deb
Files: 
 a4511b1a1b3c46d8bad088599d33f97b 2063 games optional openarena_0.8.5-3.dsc
 45f274d2441bb52d917b34cb35f945d7 238588 games optional openarena_0.8.5-3.debian.tar.gz
 562610e1d08b2775df54b8a3c641d589 927202 games optional openarena_0.8.5-3_amd64.deb
 32dbc027050b349b16742230dec61ede 2002414 games optional openarena-server_0.8.5-3_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=NQA3
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.