severity 383467 grave
tags 383467 + security lfs upstream

There are two problems here:

* Upstream bug: The 'generic' target silently miscalculates large file sizes.
* Packaging bug: On Linux, debian/rules runs builds the 'generic'
target instead of the 'linux' one.

The attached patch fixes the second bug and disables the insecure
'generic' target.
diff -ur wipe-0.20/debian/rules wipe/debian/rules
--- wipe-0.20/debian/rules	2006-09-15 19:33:13.000000000 +0200
+++ wipe/debian/rules	2006-09-15 20:14:37.000000000 +0200
@@ -12,10 +12,10 @@
 
 DEB_HOST_GNU_SYSTEM := $(shell dpkg-architecture -qDEB_HOST_GNU_SYSTEM)
 
-ifeq ($(DEB_HOST_GNU_SYSTEM), linux)
+ifeq ($(DEB_HOST_GNU_SYSTEM), linux-gnu)
 	target = linux
 else
-	target = generic
+	target = $(error Broken large file support, see bug \#383467)
 endif
 
 CFLAGS = -Wall -g -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64

Reply via email to