Package: qemu
Version: 0.9.0+20070816-1
Severity: important

Patch 90_security.patch, in debian but not upstream, adds the following 
lines to block.c:

+        unsigned ns;
+
+        ns = sector_num * 512;

Because sector_num is int64_t, the new variable ns introduces
an unwanted 32-bit truncation.

The debian patch causes, e.g., qemu-img -O raw to fail for
files larger than 4GB. 

-- System Information:
Debian Release: lenny/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.22-2-amd64 (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/bash

Versions of packages qemu depends on:
ii  bochsbios          2.3+20070705-2        BIOS for the Bochs emulator
ii  libasound2         1.0.15-2              ALSA library
ii  libc6              2.6.1-1               GNU C Library: Shared libraries
ii  libncurses5        5.6+20071013-1        Shared libraries for terminal hand
ii  libsdl1.2debian    1.2.11-9              Simple DirectMedia Layer
ii  openbios-sparc     1.0~alpha2+20070816-1 SPARC Open Firmware
ii  openhackware       0.4.1-2               OpenFirmware emulator for PowerPC
ii  proll              18-2                  JavaStation PROM 2.x compatible re
ii  vgabios            0.6a-3                VGA BIOS software for the Bochs an
ii  zlib1g             1:1.2.3.3.dfsg-6      compression library - runtime

Versions of packages qemu recommends:
ii  debootstrap                   1.0.6      Bootstrap a basic Debian system
ii  sharutils                     1:4.6.3-1  shar, unshar, uuencode, uudecode
pn  vde2                          <none>     (no description available)

-- no debconf information



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to