Bug#608979: Crash with long HOME environment variable

2011-01-14 Thread Nico Golde
tags 608979 - security severity 608979 minor thanks Hi, this is no security bug. As far as I can tell this is a NULL ptr dereference when create_local_config_file() returns NULL without checking if fopen failed when attempting to save a configuration file. There might be a similar case, that's

Bug#608979: Crash with long HOME environment variable

2011-01-05 Thread Silvio Cesare
What you're describing could quite likely be the scenario of why its crashing. If you are happy that what you're describing is the problem, then implement a patch, verify the crash is gone and close the bug. I found the crash automatically while fuzzing the Debian package repository using an opens

Bug#608979: Crash with long HOME environment variable

2011-01-05 Thread Bill Allombert
On Wed, Jan 05, 2011 at 03:49:20PM +1100, Silvio Cesare wrote: > Package: toppler > Version: 1.1.3-1 > Severity: important > Tags: security > > Toppler crashes when a long HOME environment variable is used. Probably > indicative of a buffer overflow. Toppler is SGID games, so this crash might > po

Bug#608979: Crash with long HOME environment variable

2011-01-04 Thread Silvio Cesare
Package: toppler Version: 1.1.3-1 Severity: important Tags: security Toppler crashes when a long HOME environment variable is used. Probably indicative of a buffer overflow. Toppler is SGID games, so this crash might potentially lead to privilege escalation.