Debian Bug report logs - #813089
qeth/ctc: correct stack corruption for numerous qeth/ctc devices

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Hendrik Brueckner <brueckner@linux.vnet.ibm.com>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: qeth/ctc: correct stack corruption for numerous qeth/ctc devices

Date: Fri, 29 Jan 2016 12:32:58 +0100

[Message part 1 (text/plain, inline)]

Package: s390-netdevice
Version: 0.0.39
Severity: important
Tags: d-i patch

Hi,

the s390-netdevice fails to display the list of qeth netword device if there
are numerous network devices available.  For example, with 68 or more qeth
network devices (each consisting of 3 devices).

The problem is a static buffer defined on the stack of the get_ctc_channels()
and get_qeth_device() functions.  When iterating through the tree/list of
network devices, the buffer is filled to be later displayed to the user.
The strncat() function writes beyond the end the of the buffer and corrupts
the function stack.

To solve this problem, the buffer that contains the network device list is
dynamically allocated.  The buffer size is determined from the number of
network devices.

Thanks and kind regards,
  Hendrik

[0002-netdevice-correct-stack-corruption-due-to-numerous-d.patch (text/plain, attachment)]

Message #10 received at 813089-close@bugs.debian.org (full text, mbox, reply):

From: Philipp Kern <pkern@debian.org>

To: 813089-close@bugs.debian.org

Subject: Bug#813089: fixed in s390-netdevice 0.0.40

Date: Sun, 07 Feb 2016 00:51:44 +0000

Source: s390-netdevice
Source-Version: 0.0.40

We believe that the bug you reported is fixed in the latest version of
s390-netdevice, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 813089@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Philipp Kern <pkern@debian.org> (supplier of updated s390-netdevice package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Sun, 07 Feb 2016 01:41:26 +0100
Source: s390-netdevice
Binary: s390-netdevice
Architecture: source s390x
Version: 0.0.40
Distribution: unstable
Urgency: medium
Maintainer: Debian Install System Team <debian-boot@lists.debian.org>
Changed-By: Philipp Kern <pkern@debian.org>
Description:
 s390-netdevice - Configure network hardware (udeb)
Closes: 813089 813121
Changes:
 s390-netdevice (0.0.40) unstable; urgency=medium
 .
   [ Colin Watson ]
   * Use HTTPS for Vcs-* URLs, and link to cgit rather than gitweb.
 .
   [ Hendrik Brueckner ]
   * qeth: substitute layer and port number in qeth/confirm template
     (Closes: #813121)
   * netdevice: correct stack corruption due to numerous devices
     (Closes: #813089)
Checksums-Sha1:
 73449b0cd2f00ce2981934327d08ba618d63ff54 1441 s390-netdevice_0.0.40.dsc
 ea20c79d503cdbcd50be75f154a85263de983830 95428 s390-netdevice_0.0.40.tar.xz
 569fd78928a2812c6ff4589d60305a0b80f6703a 83268 s390-netdevice_0.0.40_s390x.udeb
Checksums-Sha256:
 5fbf8e732531b76226cfd0321cf617d5e7ae09a9f5d2ae0939c7a0069ff89692 1441 s390-netdevice_0.0.40.dsc
 9f3c631d92ea6a4384f61e9d3429a6c5ac2c83bc919d5690f60642dc0f3a2648 95428 s390-netdevice_0.0.40.tar.xz
 738f22240cf0f96b9cae69d2d69dbfb619f5e7fdbc14391873512459289668b5 83268 s390-netdevice_0.0.40_s390x.udeb
Files:
 212e620944613b0b6e98bcef7d714305 1441 debian-installer standard s390-netdevice_0.0.40.dsc
 7a1a392b3216ce56e7d67199ccb2089b 95428 debian-installer standard s390-netdevice_0.0.40.tar.xz
 489bf4e99c08e2fa39110ee49f7b9727 83268 debian-installer standard s390-netdevice_0.0.40_s390x.udeb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBCAAGBQJWtpPxAAoJEERuJUU10Fbsg5cH/2i7rE8GzdiC3qI39+N40U5/
BiOUo0DTmGYbN8xVnPsFB3HccQlWRWEqo8x6xo0XmkpBXfel5OqoZagv761JlYhx
5jh0aRpwHolbvWf5cyLmbFWWBaUjSxssek/ZbgSw4yj1PKaQh5eIZF1LUmvjiUBg
xqgB/3iZi7dgaBanqlA0hrjEBkgb/+ABQRDEdkUZv5u27Ga4QB0puO3/OPrmvhzw
Kxn1phvwNBPkRDGDYUroymbWoCRfIWxnXXenkp+ETXtkvdc28TUc1LeHHE6bsPTv
cNCN+/9sk8sK5ZsRyqucjnl4KORyUhU9KGGtSJUvNqiGDFKRB2E9TuFq3h7rTqE=
=O5iE
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.