Your message dated Tue, 08 Jan 2013 23:02:04 +0000 with message-id <e1tsibi-0006ea...@franck.debian.org> and subject line Bug#627121: fixed in gzip 1.3.12-9+squeeze1 has caused the Debian Bug report #627121, regarding gzip - Overlapping memory areas in memcpy to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 627121: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=627121 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: gzip Version: 1.3.12-9 Severity: important A valid gz file is said to have invalid checksum. How to reproduce: $ wget http://zlib.net/zlib-1.2.5.tar.gz $ md5sum http://zlib.net/zlib-1.2.5.tar.gz c735eab2d659a96e5a594c9e8541ad63 zlib-1.2.5.tar.gz $ gzip -t zlib-1.2.5.tar.gz gzip: zlib-1.2.5.tar.gz: invalid compressed data--crc error Either gzip 1.3.13 compiled by hand, or minigzip from libz-1.2.5 results in the file being valid. I tested on a i386 SID, and it worked. But forcing a 32bit build of 1.3.12-9 on my x86_64 leads to the same failure. The 32 bit build is done using these commands: $ apt-get source gzip $ cd gzip-1.3.12 $ ./configure CC="gcc -m32" $ ./gzip -t zlib-1.2.5.tar.gz gzip: zlib-1.2.5.tar.gz: invalid compressed data--crc error I got no idea what can go wrong. I though the 32bit build would work, but no ! -- System Information: Debian Release: wheezy/sid APT prefers unstable APT policy: (500, 'unstable'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 2.6.38 (SMP w/4 CPU cores; PREEMPT) Locale: LANG=fr_FR.utf8, LC_CTYPE=fr_FR.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages gzip depends on: ii libc6 2.13-4 Embedded GNU C Library: Shared lib gzip recommends no packages. Versions of packages gzip suggests: ii less 443-1 pager program similar to more -- no debconf information
--- End Message ---
--- Begin Message ---Source: gzip Source-Version: 1.3.12-9+squeeze1 We believe that the bug you reported is fixed in the latest version of gzip, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 627...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Niels Thykier <ni...@thykier.net> (supplier of updated gzip package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sat, 05 Jan 2013 11:31:24 +0100 Source: gzip Binary: gzip gzip-win32 Architecture: source all i386 Version: 1.3.12-9+squeeze1 Distribution: stable Urgency: low Maintainer: Bdale Garbee <bd...@gag.com> Changed-By: Niels Thykier <ni...@thykier.net> Description: gzip - GNU compression utilities gzip-win32 - The GNU compression utility (win32 build) Closes: 627121 Changes: gzip (1.3.12-9+squeeze1) stable; urgency=low . * Non-maintainer upload to stable. * Backport upstream patch to avoid using memcpy on overlapping memory regions. (Closes: #627121) Checksums-Sha1: 45ae62184e52c9600ebfff53075acd1f2e0e6357 1691 gzip_1.3.12-9+squeeze1.dsc 48216b34d9704abf1fa9a2422cb1541b6fe6f6a4 16219 gzip_1.3.12-9+squeeze1.diff.gz 0c3a1eeaad4ad64187482dfaa870f000d3b585c9 68200 gzip-win32_1.3.12-9+squeeze1_all.deb 8577144100e817813b01cc8fcbfbb48dc72082f6 101932 gzip_1.3.12-9+squeeze1_i386.deb Checksums-Sha256: c80f9a94b851bff628268ae184e2827b8dfa8262ea1e9dcbd5dc17f91440f9d2 1691 gzip_1.3.12-9+squeeze1.dsc 556f6001e77c73e0afec59b9dafa87814ea96419f1a5d2ee48cde54718b5c209 16219 gzip_1.3.12-9+squeeze1.diff.gz 5abfee5ebb5c85943961994acd9e9820df2cc4ecd3960ba11a9d7e7791b3f179 68200 gzip-win32_1.3.12-9+squeeze1_all.deb 3794e20461deca7b9ebfed9a839d628ce2938fcd5ac536889c07b4e561ad7f28 101932 gzip_1.3.12-9+squeeze1_i386.deb Files: 30669caedcac715e2218379b83808e28 1691 utils required gzip_1.3.12-9+squeeze1.dsc ce8740277c3efbe7b46c1765e06239c5 16219 utils required gzip_1.3.12-9+squeeze1.diff.gz b8dbff70cbbfa17746a6125234c8fcab 68200 utils extra gzip-win32_1.3.12-9+squeeze1_all.deb 2e11b44bbebb57213dbffb22d73e2ab9 101932 utils required gzip_1.3.12-9+squeeze1_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQIcBAEBCAAGBQJQ6gQKAAoJEAVLu599gGRC9IcP/0Bws6t2UPpL6KHUBTAucO37 GK2RnPOM9ZfZRgmbIADo/3v4u3ibKewLXwCLRzKHquy+bkDYRxGbn7hP4HRFBROe 1ZSSVWN0rUb6VmYIxa3IPIZNGkC9K7BZk/zj72LkOMplUOIYTI41jEoTQepkucsO nAYrhHrlobyR1MzZ+Ity4dNJ9jgSYMkIQf4Ytbsb7gGkBGQfqde7Q6FDxiAUEuYp pWfFEpOn4qe/d/mpU94EviT7ax3MkQYKI0jm0c5VzoBw47d1e7seL6QFLZkbaMQc A/6WoNZY2kiLgJM7u99mp2a51vAiSpNXJAGsP/mittImDXoiyYbbbf7/giJCrici lboIsVXxcStgq/yED4YMr5EUzG4fdZoRD05yf3QqKXvqCRqNZ3GWl48xdC/Pomwr ZEEe+rp+84Xl1BgbB3tcGdIru4aYm++Qpt5gS6gOTT3Wu6pQt8rUyyqVxU2WZvYn YVM7GyzZl2ZEvoLmMDXLfbvCJblgCHdov3j98+BwEWZt8EKImd1akcGsh5RFjlST kpyeOUO9YP7N6JF8HgXe5QiH/WtIGpaegcEk773uENquuezE4noLw8A90x1cXyEb bLLvQaztLxiSpYL3nRwww1zpY5/zH/v1GAgRGPrscFtNkWMysitBkIxukWCF3M2O cATS3iIeIZPh3zbcriFx =zO2V -----END PGP SIGNATURE-----
--- End Message ---
