Package: openconnect
Version: 3.20-4
Severity: normal
Tags: patch

Dear Maintainer,

when trying to use a configuration file with openconnect (--config option),
I get weird errors pointing to string corruption:
  Failed to open 'tc/openconnect/vpnc-script-no-dns' for write: No such file or 
directory

Inspecting the code, it seems that there is some misuse of the getopt_long
system. It assumes it is safe to use optarg for long-time storage.

The solution that works for me is an additional strdup:

--- openconnect-3.20/main.c.org 2012-05-16 17:27:00.000000000 +0200
+++ openconnect-3.20/main.c     2015-01-28 15:55:04.125868841 +0100
@@ -264,5 +264,5 @@
 static int config_line_num = 0;
 
-#define keep_config_arg() (config_arg)
+#define keep_config_arg() (strdup(config_arg))
 
 static int next_option(int argc, char **argv, char **config_arg)


-- System Information:
Debian Release: 7.8
  APT prefers stable
  APT policy: (700, 'stable'), (500, 'stable-updates'), (400, 'testing'), (350, 
'experimental'), (350, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.11-0.bpo.2-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages openconnect depends on:
ii  libc6            2.13-38+deb7u7
ii  libopenconnect1  3.20-4
ii  libproxy0        0.3.1-6
ii  libssl1.0.0      1.0.1e-2+deb7u14
ii  libxml2          2.8.0+dfsg1-7+wheezy2
ii  vpnc-scripts     0.1~git20120602-2
ii  zlib1g           1:1.2.7.dfsg-13

openconnect recommends no packages.

openconnect suggests no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to