Package: xmms-scrobbler
Version: 0.3.8.1asd1
Severity: grave

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Upstream's attempt to work around the 'not all request variables set'
bug by limiting song submissions to ten items[0] has the very
unfortunate side effect of losing a lot of data.

The right answer is probably to attempt to submit in large blocks, then
binary-search out the one (or more) lines that fail, and just junk that
line. Or, alternatively, fix the real bug.

However, as it stands now: After the recent audioscrobbler downtime, I
had hundreds of tracks in the scrobblerqueue file. Then, xmms-scrobbler
managed to reconnect to audioscrobler (when it finally came back) and
promptly through away the vast majority of my data.

As xmms-scrobbler currently stands, it throws out the user's data
arbitrarily, often hangs xmms, apparently can crash xmms [and, look at
the crap on the stack in that backtrace --- PGAT --- plain old ASCII.
Looks exploitable], etc. For all these reasons, I really doubt we should
ship xmms-scrobbler as-is in Sarge.

[BTW: Don't worry about the asd1 at the end of version; only change is
to make it prefer ARTIST over PERFORMER]

- -- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (500, 'testing'), (130, 'unstable'), (120, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.6.10-bohr
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages xmms-scrobbler depends on:
ii  libc6               2.3.2.ds1-21         GNU C Library: Shared libraries an
ii  libcurl3            7.13.2-2             Multi-protocol file transfer libra
ii  libidn11            0.5.13-1.0           GNU libidn library, implementation
ii  libmusicbrainz4     2.1.1-3              Second generation incarnation of t
ii  libssl0.9.7         0.9.7e-3             SSL shared libraries
ii  libstdc++5          1:3.3.5-12           The GNU Standard C++ Library v3
ii  xmms                1.2.10+cvs20050209-2 Versatile X audio player that look
ii  zlib1g              1:1.2.2-4            compression library - runtime

- -- no debconf information

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQFCgD1r+z+IwlXqWf4RAl4/AJ9p/pp9kHCZse93h+EFox0PqfeZjQCghz27
i1kfHZD3VHBm0A7mLBUWfTE=
=1Dcj
-----END PGP SIGNATURE-----


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to