Tags: fixed-upstream
Using webp-dev on buster with test file bug.c from the second bug
mentioned above compiled with -lwebp, malloc reported: "free():
corrupted unsorted chunks" within WebPIDelete().
This suggests to me that the bug may be exploitable on systems with
libwebp6 installed - of which
I had a look at and it appears to have gone into both 5.3 (final) and
5.2.15.
For what it's worth, it took only a day or so to exhibit the issue on our
(admittedly active) nginx/postgres/PHP server; we weren't doing any unusual
work during that time. If you're using btrfs, and you can't apply a pa
We seem to have run into this yesterday on a production server sing a
custom compile of the 5.2.9 buster-backports kernel. nginx was hung in D
status, sync hung as well, no obvious reason for it; I ended up having to
reset the machine.
On boot I found we had lost several hours of logs and worse, s
This bug was reported upstream here:
https://github.com/bitcoin/bitcoin/issues/14580
It appears to be a GCC bug:
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=90348
The fix merged for the upcoming 0.19.0, 0.18.1 and 0.17.2 was to
compile with -fno-stack-reuse:
https://github.com/bitcoin/bitcoin/pu
4 matches
Mail list logo
