Package: cdebootstrap
Version: 0.6.2
Severity: normal
Tags: lfs

Hi!

This package does not have .deb LFS [L]. Through code staring I can see
at least src/package.c:package_extract_self() which stores the memberlen
in a ssize_t variable. package_extract_self_parse_header_length()
would also truncate the value (long, strtoul()), along with all
package_extract_self_FOO() which only take a size_t argument. And the
decompress_FOO() and struct decompress_FOO len members.

  [L] <https://wiki.debian.org/Teams/Dpkg/DebSupport>

There might be other issues, but I've not checked further. There's
some example packages in the dpkg/pkg-tests repository [T] in the
t-deb-lfs directory.

  [T] <git://anonscm.debian.org/dpkg/pkg-tests.git>

Thanks,
Guillem


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to