Your message dated Mon, 03 Nov 2014 16:33:58 +0000
with message-id <e1xlkzq-0004gc...@franck.debian.org>
and subject line Bug#764386: fixed in efivar 0.15-2
has caused the Debian Bug report #764386,
regarding libefivar0: Segmentation fault in vars_get_variable() (vars.c:165)
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
764386: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=764386
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: libefivar0
Version: 0.12-1
Severity: critical
Justification: breaks the whole system


Upgrading libefivar0 from version 0.10-5 to 0.12-1 causes a segmentation
fault when running efibootmgr without arguments (I tried it with both
efibootmgr 0.7.0-2 and 0.9.0-1). I'm not quite sure if severity critical is
justified, but I think a broken efibootmgr is at least potentially able to
break the whole system.

gdb pointed to libefivar.so.0 which has no debugging symbols, so I built my
own and that one crashes in vars.c line 165 with var == NULL. The last two
lines in an strace log before the crash are

  open("/sys/firmware/efi/vars/Boot0005-8be4[...]/raw_var", O_RDONLY) = 3
  read(3, [...], 4096) = -1 EIO (Input/output error)

(Sorry, no copy&paste, just read&type; the system in question has only very
limited network connectivity at the moment and I'm sending this report from
a different system.)

var is apparently returned from a call to read_file() a few lines above.
The source code history shows that read_fd() has recently been replaced by
read_file(), but they behave differently after read errors. In particular,
read_file() resets the buffer to NULL whereas read_fd() didn't.

--- End Message ---
--- Begin Message ---
Source: efivar
Source-Version: 0.15-2

We believe that the bug you reported is fixed in the latest version of
efivar, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 764...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Daniel Jared Dominguez <jared_doming...@dell.com> (supplier of updated efivar 
package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 03 Nov 2014 10:07:39 -0600
Source: efivar
Binary: libefivar-dev efivar libefivar0
Architecture: source amd64
Version: 0.15-2
Distribution: unstable
Urgency: medium
Maintainer: Daniel Jared Dominguez <jared_doming...@dell.com>
Changed-By: Daniel Jared Dominguez <jared_doming...@dell.com>
Description:
 efivar     - Tools to manage UEFI variables
 libefivar-dev - Development headers for libefivar
 libefivar0 - Library to manage UEFI variables
Closes: 764386
Changes:
 efivar (0.15-2) unstable; urgency=medium
 .
   * Apply upstream patches (Closes: #764386)
Checksums-Sha1:
 ea9b1237cb1ff11ca3e0a170a1264af0a8acb771 2106 efivar_0.15-2.dsc
 87efdf15302830cb5ff80aaa42b184e7502a883c 5932 efivar_0.15-2.debian.tar.xz
 21a673f1ab3c5710e4f24d470331f0efc4dbaa5c 6416 libefivar-dev_0.15-2_amd64.deb
 169138c4b06efc09c33c8e33fad918b83dc22745 8132 efivar_0.15-2_amd64.deb
 2b63c1b6f817472cf16c51ce0d30c103d919909c 14426 libefivar0_0.15-2_amd64.deb
Checksums-Sha256:
 c122280860cc6b08d5808456596cb671b84ba179d3ed853966c171f6762948db 2106 
efivar_0.15-2.dsc
 165e37eaea7e1f4a54b154f4bfec1d61dd58149ba031331e50d1d318c4ada16b 5932 
efivar_0.15-2.debian.tar.xz
 ae93ab91210bbf9d01f57f069fc6597a68f817e2be19aad1061d2730c7e5aa04 6416 
libefivar-dev_0.15-2_amd64.deb
 f1a0b675e2353fd843561323132ac66ea384449cfd92f9bc04ad268f0b62c634 8132 
efivar_0.15-2_amd64.deb
 facd6731cedb71c76ef8f65ec24074bf0cf6cf5fe677a77c2b2fbd5f76d5db7b 14426 
libefivar0_0.15-2_amd64.deb
Files:
 1765c6e0f4d2f807b518f601e10693a2 2106 libs optional efivar_0.15-2.dsc
 d780fdf58166f3ee633bb129ab4c5ca8 5932 libs optional efivar_0.15-2.debian.tar.xz
 3ddc50a8f90f12582010eb8d281c221e 6416 libdevel optional 
libefivar-dev_0.15-2_amd64.deb
 d1ece844542227d144a0d66b6b684c4c 8132 admin optional efivar_0.15-2_amd64.deb
 46e69376eb554b04b4c078aeac1ccacc 14426 libs optional 
libefivar0_0.15-2_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=hsPH
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to