Bug#655411: Compat vsnprintf implementation subject to race condition

2012-01-11 Thread Guillem Jover
On Wed, 2012-01-11 at 01:23:15 -0600, Jonathan Nieder wrote: > Guillem Jover wrote: > > I'm committing a fix, that still uses a cached file per process. > > Thanks, that makes sense. Sorry, I should think more before throwing > things out like that atfork suggestion. > > Thanks and sorry for the

Bug#655411: Compat vsnprintf implementation subject to race condition

2012-01-10 Thread Jonathan Nieder
Guillem Jover wrote: > I'm committing a fix, that still uses a cached file per process. Thanks, that makes sense. Sorry, I should think more before throwing things out like that atfork suggestion. Thanks and sorry for the noise. Jonathan -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@

Bug#655411: Compat vsnprintf implementation subject to race condition

2012-01-10 Thread Guillem Jover
found 655411 dpkg/1.2.0 thanks On Tue, 2012-01-10 at 16:40:00 -0600, Jonathan Nieder wrote: > dan...@ruoso.com wrote: > > The implementation of vsnprintf in the compat library uses and > > caches the file descriptor for a temporary file. > > > > If the vsnprintf function is called before a fork, t

Bug#655411: Compat vsnprintf implementation subject to race condition

2012-01-10 Thread Jonathan Nieder
found 655411 dpkg/1.16.1.2 # doesn't affect Debian architectures severity 655411 wishlist quit Hi, dan...@ruoso.com wrote: > The implementation of vsnprintf in the compat library uses and > caches the file descriptor for a temporary file. > > If the vsnprintf function is called before a fork, tw

Bug#655411: Compat vsnprintf implementation subject to race condition

2012-01-10 Thread dan...@ruoso.com
Package: dpkg The implementation of vsnprintf in the compat library uses and caches the file descriptor for a temporary file. If the vsnprintf function is called before a fork, two concurrent processes will share the cached file descriptor and will eventually cause a race condition where the o