On Wed, Apr 30, 2025 at 09:52:18PM +0100, Colin Watson wrote:
I'm trying to get my test system closer to yours, but no luck so far. The best I've been able to come up with is an overlap between source and destination in a strlcpy call, which should probably be fixed,
I filed https://bugzilla.mindrot.org/show_bug.cgi?id=3819 upstream with a patch for that. I wouldn't bet on it being the cause here, but if you happen to have time and ability to recompile with that patch, I don't suppose it would hurt to try.
(If you do have time and ability to recompile, trying with unpatched upstream source might also be worthwhile; it would be good to narrow down whether a Debian patch is at fault.)
-- Colin Watson (he/him) [cjwat...@debian.org]
