Your message dated Sun, 09 Aug 2009 18:17:39 +0000 with message-id <e1macxf-00027c...@ries.debian.org> and subject line Bug#461519: fixed in libmikmod 3.1.11-6.1 has caused the Debian Bug report #461519, regarding libmikmod causes app to segfault or abort when loading multiple music files with varying number of channels. to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 461519: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=461519 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: libmikmod2 Version: 3.1.11-a-6 Severity: important Tags: patch There is bug in mikmod that causes an app to segfault or abort when loading multiple music files with varying number of channels. This is the same bug that I reported, and fixed, almost a year ago in SDL-mixer, which until recently used an internal version of a slightly older libmikmod. Here is the (now archived) bug report: http://bugs.debian.org/422021 Previously, I believed that the latest version of libmikmod, which Debian uses, was unaffected by this bug. I had done some preliminary, non-conclusive tests in this regard. I was wrong. Libmikmod is indeed affected. I created and tested a patch for libmikmod, which fixes this bug, and have included it with this report. Upstream SDL-mixer has incorporated my patch in their latest svn. Debian SDL-mixer had been using my patch, but re-broke when they decided to dynamically link against libmikmod rather than use the SDL-mixer internal version (ironically, at my suggestion). When you patch libmikmod, Debian and it's derivitaves will no longer suffer from this bug (hopefully). It appears upstream is once again being maintained, so hopefully this bug will one day soon be put down once and for all. -Brandon--- mplayer.c.old 2008-01-18 23:12:22.000000000 -0800 +++ mplayer.c 2008-01-18 23:51:11.000000000 -0800 @@ -2318,7 +2318,7 @@ SAMPLE *s; mod->totalchn=mod->realchn=0; - for (channel=0;channel<md_sngchn;channel++) { + for (channel=0;channel<pf->numchn;channel++) { aout=&mod->voice[channel]; i=aout->main.i; s=aout->main.s; @@ -3086,7 +3086,7 @@ pf->patbrk=0; pf->vbtick=pf->sngspd; - for (t=0;t<md_sngchn;t++) { + for (t=0;t<pf->numchn;t++) { Voice_Stop_internal(t); pf->voice[t].main.i=NULL; pf->voice[t].main.s=NULL; @@ -3111,7 +3111,7 @@ pf->patbrk=0; pf->vbtick=pf->sngspd; - for (t=0;t<md_sngchn;t++) { + for (t=0;t<pf->numchn;t++) { Voice_Stop_internal(t); pf->voice[t].main.i=NULL; pf->voice[t].main.s=NULL; @@ -3138,7 +3138,7 @@ pf->sngpos=pos; pf->vbtick=pf->sngspd; - for (t=0;t<md_sngchn;t++) { + for (t=0;t<pf->numchn;t++) { Voice_Stop_internal(t); pf->voice[t].main.i=NULL; pf->voice[t].main.s=NULL;
--- End Message ---
--- Begin Message ---Source: libmikmod Source-Version: 3.1.11-6.1 We believe that the bug you reported is fixed in the latest version of libmikmod, which is due to be installed in the Debian FTP archive: libmikmod2-dev_3.1.11-a-6.1_amd64.deb to pool/main/libm/libmikmod/libmikmod2-dev_3.1.11-a-6.1_amd64.deb libmikmod2_3.1.11-a-6.1_amd64.deb to pool/main/libm/libmikmod/libmikmod2_3.1.11-a-6.1_amd64.deb libmikmod_3.1.11-6.1.diff.gz to pool/main/libm/libmikmod/libmikmod_3.1.11-6.1.diff.gz libmikmod_3.1.11-6.1.dsc to pool/main/libm/libmikmod/libmikmod_3.1.11-6.1.dsc A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 461...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Giuseppe Iuculano <giuse...@iuculano.it> (supplier of updated libmikmod package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Wed, 05 Aug 2009 11:50:25 +0200 Source: libmikmod Binary: libmikmod2-dev libmikmod2 Architecture: source amd64 Version: 3.1.11-6.1 Distribution: unstable Urgency: high Maintainer: Ingo Saitz <i...@debian.org> Changed-By: Giuseppe Iuculano <giuse...@iuculano.it> Description: libmikmod2 - A portable sound library libmikmod2-dev - A portable sound library - development files Closes: 461519 476339 Changes: libmikmod (3.1.11-6.1) unstable; urgency=high . * Non-maintainer upload. * debian/patches/CVE-2007-6720.patch: Fixed application crash or abort when loading/playing multiple music files with varying number of channels. (CVE-2007-6720) (Closes: #461519) * debian/patches/CVE-2009-0179.patch: Fixed application crash when loading XM files. (CVE-2009-0179) (Closes: #476339) Checksums-Sha1: ddbc4e2401988174c0779bf921a2ed6f1baf74ff 1017 libmikmod_3.1.11-6.1.dsc d15b768244d3bbbcbd6340e6d29877ea8a4afab1 336868 libmikmod_3.1.11-6.1.diff.gz 4cce0e6491ca5123c747e3edd38cbe0005caf034 262980 libmikmod2-dev_3.1.11-a-6.1_amd64.deb afb266ec91821cffd37ad227f8c94bd03240c530 154574 libmikmod2_3.1.11-a-6.1_amd64.deb Checksums-Sha256: 9321127347bd2ebf9429700cabe5945d7ecd77fc5cfdaf95f72c0fcb6d4d4eca 1017 libmikmod_3.1.11-6.1.dsc 440bd0ba9f53e3c24cec2038213d8a96f6636cb0f7be83f81de2ac024ee8cb10 336868 libmikmod_3.1.11-6.1.diff.gz 3eba29c2aa5aad6beb2ec1937c9c8aaadc9aa6cd8d47e234541d9d9d1cb8363b 262980 libmikmod2-dev_3.1.11-a-6.1_amd64.deb b09a83d776ddea303ea244c22efb93aaab42f69aec6177b5d62676c129f8c9fc 154574 libmikmod2_3.1.11-a-6.1_amd64.deb Files: 7a30b862ae1283c62ff156020679806d 1017 libs optional libmikmod_3.1.11-6.1.dsc 24558c996f0da36bc87c3ea565599059 336868 libs optional libmikmod_3.1.11-6.1.diff.gz 94c9473e9fa05bef5988826bd1afeb9b 262980 libdevel optional libmikmod2-dev_3.1.11-a-6.1_amd64.deb 849fa2f5fd54a012a2c00c2dc97c3c43 154574 libs optional libmikmod2_3.1.11-a-6.1_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iEYEARECAAYFAkp/DZkACgkQHYflSXNkfP/HdACdF1/VP1BUGXzIwVP6VJIwh66H MKUAn0nPyqUfZ9i7N7ULoEqNQ1xbLMD9 =Iu4S -----END PGP SIGNATURE-----
--- End Message ---
