Your message dated Mon, 02 Jul 2012 15:03:11 +0000
with message-id <e1sli9f-0003n3...@franck.debian.org>
and subject line Bug#679925: fixed in lua-event 0.4.1-2
has caused the Debian Bug report #679925,
regarding error not handled correctly, potential crash
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
679925: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=679925
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: lua-event
Version: 0.4.1-1
Severity: grave
Tags: upstream

When this binding is used with libevent 2.0 some errors are not handled
properly. An extract of the personal communication with the  maintainer of the
binding follows, giving precise details on how this bug affects, for example,
the prosody jabber server.

-- 8< ---------------------------------------------------------
From: Matthew Wild

The problem is caused by a combination of Lua's exception handling
(setjmp+longjmp) and some new re-entrant checks added to libevent.
When an error occurs inside an event callback Lua (at the C level)
jumps outs of libevent and up to the last set error handler, which in
Prosody is before libevent is called. After logging the error Prosody
heads back into libevent, but unfortunately libevent2 has an internal
flag to prevent entering it twice. Because the error jumped right
back, this flag is never unset and libevent immediately returns
(thinking it is already running). This triggers a shutdown in Prosody.

The consequence is that given any other bug that causes an error to be
thrown in Prosody (there aren't many, but they exist) it's possible to
remotely shut down a Prosody server that is using libevent, even from
an unauthenticated connection.

-- 8< ---------------------------------------------------------



-- System Information:
Debian Release: wheezy/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages lua-event depends on:
ii  libc6              2.13-33
ii  libevent-2.0-5     2.0.19-stable-3
ii  lua-socket         2.0.2-8
ii  multiarch-support  2.13-33

lua-event recommends no packages.

lua-event suggests no packages.

-- no debconf information



--- End Message ---
--- Begin Message ---
Source: lua-event
Source-Version: 0.4.1-2

We believe that the bug you reported is fixed in the latest version of
lua-event, which is due to be installed in the Debian FTP archive:

liblua5.1-event-dev_0.4.1-2_all.deb
  to main/l/lua-event/liblua5.1-event-dev_0.4.1-2_all.deb
liblua5.1-event0_0.4.1-2_all.deb
  to main/l/lua-event/liblua5.1-event0_0.4.1-2_all.deb
lua-event-dev_0.4.1-2_amd64.deb
  to main/l/lua-event/lua-event-dev_0.4.1-2_amd64.deb
lua-event_0.4.1-2.debian.tar.gz
  to main/l/lua-event/lua-event_0.4.1-2.debian.tar.gz
lua-event_0.4.1-2.dsc
  to main/l/lua-event/lua-event_0.4.1-2.dsc
lua-event_0.4.1-2_amd64.deb
  to main/l/lua-event/lua-event_0.4.1-2_amd64.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 679...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Enrico Tassi <gareuselesi...@debian.org> (supplier of updated lua-event package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Mon, 02 Jul 2012 16:36:23 +0200
Source: lua-event
Binary: lua-event lua-event-dev liblua5.1-event0 liblua5.1-event-dev
Architecture: source amd64 all
Version: 0.4.1-2
Distribution: unstable
Urgency: low
Maintainer: Enrico Tassi <gareuselesi...@debian.org>
Changed-By: Enrico Tassi <gareuselesi...@debian.org>
Description: 
 liblua5.1-event-dev - Transitional package for lua-event-dev
 liblua5.1-event0 - Transitional package for lua-event
 lua-event  - asynchronous event notification library for Lua
 lua-event-dev - libevent development files for the Lua language
Closes: 679925
Changes: 
 lua-event (0.4.1-2) unstable; urgency=low
 .
   * Fix error handling with libevent2 (thanks Matthew Wild). Added patch
     luaevent-catch-errors-1.patch (Closes: #679925)
Checksums-Sha1: 
 89d0aac3303e19f0141d4592debff9e9a51a765c 1426 lua-event_0.4.1-2.dsc
 5af7a37b49cf834a4c387c0ad7fda65afc19eb30 3631 lua-event_0.4.1-2.debian.tar.gz
 ed332f4b28c71fe3272a292bf7e23a0014bf17c9 16246 lua-event_0.4.1-2_amd64.deb
 566a761a4505fcdfb7025659591a025099bcfa03 18152 lua-event-dev_0.4.1-2_amd64.deb
 e94ec232e398e0ad83c707d16022d0597bb80481 4532 liblua5.1-event0_0.4.1-2_all.deb
 117748e74e6e91db739c11ae6ef71fb20cb8e7fd 4536 
liblua5.1-event-dev_0.4.1-2_all.deb
Checksums-Sha256: 
 70c66bd923f03807c0a66f44fd36bad83154f8c3814a3b5bfaf7bb6b6f1b9369 1426 
lua-event_0.4.1-2.dsc
 26e7b5f3dc059d1fb6f4390c47046e34a852a82aadf25dc6cb4c84494be25720 3631 
lua-event_0.4.1-2.debian.tar.gz
 6f849659e2a3bcb114204beac0b2802e7d2cc1a7074b38264c955a1357da31eb 16246 
lua-event_0.4.1-2_amd64.deb
 20b959e66f4a5e64b1ef7c3eff682a79dc856e5f6f0e3d0174bdb152280507b9 18152 
lua-event-dev_0.4.1-2_amd64.deb
 a40df98d39c5c9e69944beded779fd284ae1c53db04dd2a790f15a205af7abb9 4532 
liblua5.1-event0_0.4.1-2_all.deb
 d5d071ccde9032fc9c776b9c3bd98f0e5b583dd560440085efd7cd81e369ada8 4536 
liblua5.1-event-dev_0.4.1-2_all.deb
Files: 
 b249237797230afb6601c17d3fc708ad 1426 interpreters optional 
lua-event_0.4.1-2.dsc
 a5f14470a49b971c6ad7a0f496a61ca7 3631 interpreters optional 
lua-event_0.4.1-2.debian.tar.gz
 cc081235ba3259a529ff43ed6acbbb94 16246 interpreters optional 
lua-event_0.4.1-2_amd64.deb
 c8a24b570f105d729de35fe55ce6e71a 18152 libdevel optional 
lua-event-dev_0.4.1-2_amd64.deb
 0039004edbeef51f677f5be6a470efc1 4532 oldlibs extra 
liblua5.1-event0_0.4.1-2_all.deb
 b820df9381fb525b254aec54a085c23e 4536 oldlibs extra 
liblua5.1-event-dev_0.4.1-2_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAk/xtdwACgkQ7kkcPgEj8vK9bwCgqFo0hBMEAjzEjsAeJJR5vVpO
hEwAoIlJfgw91PLiErp/3lCxxg7OCjzx
=dY5f
-----END PGP SIGNATURE-----



--- End Message ---

Reply via email to