Your message dated Fri, 10 Sep 2010 17:02:09 +0000
with message-id <e1ou6zj-0002aw...@franck.debian.org>
and subject line Bug#596281: fixed in cracklib2 2.8.16-3
has caused the Debian Bug report #596281,
regarding segfaults when giving dict path
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
596281: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=596281
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: python-cracklib
Version: 2.8.12-8lenny1
Severity: grave

Hi,

the following (cut down) piece of code, part of db.d.o, runs on lenny,
but apparently not on squeeze:

wea...@intrepid:~$ cat h
#!/usr/bin/python

import cracklib
cracklib.FascistCheck('foo', '/var/cache/cracklib/cracklib_dict')
wea...@intrepid:~$ ./h
Traceback (most recent call last):
  File "./h", line 4, in <module>
    cracklib.FascistCheck('foo', '/var/cache/cracklib/cracklib_dict')
ValueError: it is WAY too short

But on squeeze:
wea...@byrd:~$ ./h
*** glibc detected *** /usr/bin/python: free(): invalid pointer: 
0x00007fa7689b3320 ***
======= Backtrace: =========
/lib/libc.so.6(+0x71b16)[0x7fa767529b16]
/lib/libc.so.6(cfree+0x6c)[0x7fa76752e88c]
/usr/lib/pymodules/python2.6/_cracklibmodule.so(+0xe8d)[0x7fa760af2e8d]
/usr/bin/python(PyEval_EvalFrameEx+0x5165)[0x4a7b55]
/usr/bin/python(PyEval_EvalCodeEx+0x911)[0x4a9571]
/usr/bin/python(PyEval_EvalCode+0x32)[0x4a9642]
/usr/bin/python(PyRun_FileExFlags+0x13e)[0x4c985e]
/usr/bin/python(PyRun_SimpleFileExFlags+0xd4)[0x4c9a74]
/usr/bin/python(Py_Main+0x9ed)[0x41a6bd]
/lib/libc.so.6(__libc_start_main+0xfd)[0x7fa7674d6c4d]
/usr/bin/python[0x4198d9]
======= Memory map: ========
00400000-0061d000 r-xp 00000000 fe:00 102426                             
/usr/bin/python2.6
0081d000-0087f000 rw-p 0021d000 fe:00 102426                             
/usr/bin/python2.6
0087f000-0088e000 rw-p 00000000 00:00 0 
00a0b000-00adc000 rw-p 00000000 00:00 0                                  [heap]
7fa75c000000-7fa75c021000 rw-p 00000000 00:00 0 
7fa75c021000-7fa760000000 ---p 00000000 00:00 0 
7fa7606cf000-7fa7606e5000 r-xp 00000000 fe:00 114746                     
/lib/libgcc_s.so.1
7fa7606e5000-7fa7608e4000 ---p 00016000 fe:00 114746                     
/lib/libgcc_s.so.1
7fa7608e4000-7fa7608e5000 rw-p 00015000 fe:00 114746                     
/lib/libgcc_s.so.1
7fa7608e5000-7fa7608ed000 r-xp 00000000 fe:00 104382                     
/usr/lib/libcrack.so.2.8.1
7fa7608ed000-7fa760aed000 ---p 00008000 fe:00 104382                     
/usr/lib/libcrack.so.2.8.1
7fa760aed000-7fa760aee000 rw-p 00008000 fe:00 104382                     
/usr/lib/libcrack.so.2.8.1
7fa760aee000-7fa760af2000 rw-p 00000000 00:00 0 
7fa760af2000-7fa760af4000 r-xp 00000000 fe:00 150107                     
/usr/lib/pyshared/python2.6/_cracklibmodule.so
7fa760af4000-7fa760cf3000 ---p 00002000 fe:00 150107                     
/usr/lib/pyshared/python2.6/_cracklibmodule.so
7fa760cf3000-7fa760cf4000 rw-p 00001000 fe:00 150107                     
/usr/lib/pyshared/python2.6/_cracklibmodule.so
7fa760cf4000-7fa7674b8000 r--p 00000000 fe:00 158342                     
/usr/lib/locale/locale-archive
7fa7674b8000-7fa767610000 r-xp 00000000 fe:00 114713                     
/lib/libc-2.11.2.so
7fa767610000-7fa76780f000 ---p 00158000 fe:00 114713                     
/lib/libc-2.11.2.so
7fa76780f000-7fa767813000 r--p 00157000 fe:00 114713                     
/lib/libc-2.11.2.so
7fa767813000-7fa767814000 rw-p 0015b000 fe:00 114713                     
/lib/libc-2.11.2.so
7fa767814000-7fa767819000 rw-p 00000000 00:00 0 
7fa767819000-7fa767899000 r-xp 00000000 fe:00 114722                     
/lib/libm-2.11.2.so
7fa767899000-7fa767a99000 ---p 00080000 fe:00 114722                     
/lib/libm-2.11.2.so
7fa767a99000-7fa767a9a000 r--p 00080000 fe:00 114722                     
/lib/libm-2.11.2.so
7fa767a9a000-7fa767a9b000 rw-p 00081000 fe:00 114722                     
/lib/libm-2.11.2.so
7fa767a9b000-7fa767ab2000 r-xp 00000000 fe:00 100558                     
/usr/lib/libz.so.1.2.3.4
7fa767ab2000-7fa767cb1000 ---p 00017000 fe:00 100558                     
/usr/lib/libz.so.1.2.3.4
7fa767cb1000-7fa767cb2000 rw-p 00016000 fe:00 100558                     
/usr/lib/libz.so.1.2.3.4
7fa767cb2000-7fa767e27000 r-xp 00000000 fe:00 101422                     
/usr/lib/libcrypto.so.0.9.8
7fa767e27000-7fa768027000 ---p 00175000 fe:00 101422                     
/usr/lib/libcrypto.so.0.9.8
7fa768027000-7fa76804f000 rw-p 00175000 fe:00 101422                     
/usr/lib/libcrypto.so.0.9.8
7fa76804f000-7fa768053000 rw-p 00000000 00:00 0 
7fa768053000-7fa7680a2000 r-xp 00000000 fe:00 101423                     
/usr/lib/libssl.so.0.9.8
7fa7680a2000-7fa7682a1000 ---p 0004f000 fe:00 101423                     
/usr/lib/libssl.so.0.9.8
7fa7682a1000-7fa7682a8000 rw-p 0004e000 fe:00 101423                     
/usr/lib/libssl.so.0.9.8
7fa7682a8000-7fa7682aa000 r-xp 00000000 fe:00 114708                     
/lib/libutil-2.11.2.so
7fa7682aa000-7fa7684a9000 ---p 00002000 fe:00 114708                     
/lib/libutil-2.11.2.so
7fa7684a9000-7fa7684aa000 r--p 00001000 fe:00 114708                     
/lib/libutil-2.11.2.so
7fa7684aa000-7fa7684ab000 rw-p 00002000 fe:00 114708                     
/lib/libutil-2.11.2.so
7fa7684ab000-7fa7684ad000 r-xp 00000000 fe:00 114712                     
/lib/libdl-2.11.2.so
7fa7684ad000-7fa7686ad000 ---p 00002000 fe:00 114712                     
/lib/libdl-2.11.2.so
7fa7686ad000-7fa7686ae000 r--p 00002000 fe:00 114712                     
/lib/libdl-2.11.2.so
7fa7686ae000-7fa7686af000 rw-p 00003000 fe:00 114712                     
/lib/libdl-2.11.2.so
7fa7686af000-7fa7686c6000 r-xp 00000000 fe:00 114714                     
/lib/libpthread-2.11.2.so
7fa7686c6000-7fa7688c5000 ---p 00017000 fe:00 114714                     
/lib/libpthread-2.11.2.so
7fa7688c5000-7fa7688c6000 r--p 00016000 fe:00 114714                     
/lib/libpthread-2.11.2.so
7fa7688c6000-7fa7688c7000 rw-p 00017000 fe:00 114714                     
/lib/libpthread-2.11.2.so
7fa7688c7000-7fa7688cb000 rw-p 00000000 00:00 0 
7fa7688cb000-7fa7688e9000 r-xp 00000000 fe:00 114725                     
/lib/ld-2.11.2.so
7fa7689a7000-7fa768a5a000 rw-p 00000000 00:00 0 
7fa768a5b000-7fa768ae2000 rw-p 00000000 00:00 0 
7fa768ae6000-7fa768ae8000 rw-p 00000000 00:00 0 
7fa768ae8000-7fa768ae9000 r--p 0001d000 fe:00 114725                     
/lib/ld-2.11.2.so
7fa768ae9000-7fa768aea000 rw-p 0001e000 fe:00 114725                     
/lib/ld-2.11.2.so
7fa768aea000-7fa768aeb000 rw-p 00000000 00:00 0 
7fff86b10000-7fff86b2c000 rw-p 00000000 00:00 0                          [stack]
7fff86bc8000-7fff86bc9000 r-xp 00000000 00:00 0                          [vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0                  
[vsyscall]
zsh: abort      ./h


It does not die when one doesn't give a dictpath, but we use that feature.

Cheers,
weasel



--- End Message ---
--- Begin Message ---
Source: cracklib2
Source-Version: 2.8.16-3

We believe that the bug you reported is fixed in the latest version of
cracklib2, which is due to be installed in the Debian FTP archive:

cracklib-runtime_2.8.16-3_amd64.deb
  to main/c/cracklib2/cracklib-runtime_2.8.16-3_amd64.deb
cracklib2_2.8.16-3.debian.tar.gz
  to main/c/cracklib2/cracklib2_2.8.16-3.debian.tar.gz
cracklib2_2.8.16-3.dsc
  to main/c/cracklib2/cracklib2_2.8.16-3.dsc
libcrack2-dev_2.8.16-3_amd64.deb
  to main/c/cracklib2/libcrack2-dev_2.8.16-3_amd64.deb
libcrack2_2.8.16-3_amd64.deb
  to main/c/cracklib2/libcrack2_2.8.16-3_amd64.deb
python-cracklib_2.8.16-3_amd64.deb
  to main/c/cracklib2/python-cracklib_2.8.16-3_amd64.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 596...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Jan Dittberner <ja...@debian.org> (supplier of updated cracklib2 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Fri, 10 Sep 2010 18:44:23 +0200
Source: cracklib2
Binary: libcrack2 libcrack2-dev cracklib-runtime python-cracklib
Architecture: source amd64
Version: 2.8.16-3
Distribution: unstable
Urgency: low
Maintainer: Jan Dittberner <ja...@debian.org>
Changed-By: Jan Dittberner <ja...@debian.org>
Description: 
 cracklib-runtime - runtime support for password checker library cracklib2
 libcrack2  - pro-active password checker library
 libcrack2-dev - pro-active password checker library - development files
 python-cracklib - Python bindings for password checker library cracklib2
Closes: 596281
Changes: 
 cracklib2 (2.8.16-3) unstable; urgency=low
 .
   * debian/control: update to Standards-Version to 3.9.1
     - use Breaks instead of Conflicts for libcrack2's incompatibility with
       cracklib2 (<< 2.8.12-1) and libcrack2-dev's incompatibility with
       cracklib2-dev (<< 2.8.12-1)
   * add debian/patches/596281-fix-python-extension-segfault.patch: in
     cracklib-python's C module, make sure we initialize defaultdict to
     NULL at the start of _cracklib_FascistCheck. This fixes a bug where
     that variable was freed when not NULL without ever having been
     assigned any value to.  This happened when we called FascistCheck()
     with a dictionary path of our own. Thanks to Peter Palfrader for the
     patch (Closes: #596281).
Checksums-Sha1: 
 6c34852e62ed5eb4adc08efb1e4ceeb22b44a466 2069 cracklib2_2.8.16-3.dsc
 134e47cdec3d1e4d074165eaf2647031bf9d26d7 28965 cracklib2_2.8.16-3.debian.tar.gz
 eb45fa047b3a5314169677474d112bf36bcda163 208168 libcrack2_2.8.16-3_amd64.deb
 794fa7becded75231b15280447868b7753f6f5c0 35770 libcrack2-dev_2.8.16-3_amd64.deb
 87fdaed683fc22e73a17bac13d095c51da84569d 32874 
cracklib-runtime_2.8.16-3_amd64.deb
 36fba4dcafef4765e6337c222fcdae0a45b2a94e 24424 
python-cracklib_2.8.16-3_amd64.deb
Checksums-Sha256: 
 4c642098b6f9008731f6a1b6597d559f8c96a8befce729154159633cb028ddea 2069 
cracklib2_2.8.16-3.dsc
 cee9a6d070c9ad2a04b7e4de2ef2514ece00b419ab186212e092cbe112a5fa73 28965 
cracklib2_2.8.16-3.debian.tar.gz
 a087f7a1bb5c8f0c2939d75f9f4a6f1981c32f3543d6db9961a38ea56025f75d 208168 
libcrack2_2.8.16-3_amd64.deb
 12a6f7542c624e073c5715d72e751fa13831ee0a8fc3bd58aea563860c277384 35770 
libcrack2-dev_2.8.16-3_amd64.deb
 758c9b5e9b1ac4607bbdaf33f0c7d661d600ca15f21b2cc36d72f9efc70d97fc 32874 
cracklib-runtime_2.8.16-3_amd64.deb
 e4b1f103d57837c02230fe76009ab7585913e87d521082800653dcb8aa740b65 24424 
python-cracklib_2.8.16-3_amd64.deb
Files: 
 5386273f7b04cfc0a4f58aaeb29fefd2 2069 libs optional cracklib2_2.8.16-3.dsc
 8867f8a00db461d1e743b9038b2a8ebf 28965 libs optional 
cracklib2_2.8.16-3.debian.tar.gz
 ebde78c8c12a4052f82f1ec81672d97d 208168 libs optional 
libcrack2_2.8.16-3_amd64.deb
 2bf1373e980d5ad529ea4948da13b2b1 35770 libdevel extra 
libcrack2-dev_2.8.16-3_amd64.deb
 1e109495d783aa6efa5413bc098ea3aa 32874 admin optional 
cracklib-runtime_2.8.16-3_amd64.deb
 f679843fe347ebe647e35b9b062f6535 24424 python optional 
python-cracklib_2.8.16-3_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
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=yuhi
-----END PGP SIGNATURE-----



--- End Message ---

Reply via email to