Same problem for me, it seems, that glipper has a vulnerability when
reading the preferences file.

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 47277995377280 (LWP 792)]
0x00002affc00338e9 in memcpy () from /lib/libc.so.6
(gdb) bt
#0  0x00002affc00338e9 in memcpy () from /lib/libc.so.6
#1  0x00002affc001b253 in _IO_getline_info () from /lib/libc.so.6
#2  0x00002affc001a109 in fgets () from /lib/libc.so.6
#3  0x0000000000404e48 in readPreferences ()
#4  0x0000000000405e91 in main ()
(gdb) 

My .glipper has been created under feisty/i386, migrated to gutsy/i386
and finally I'm using it under gutsy/x86_64.

This is the content of my prefs file:

# hexdump -C ~/.glipper/prefs
00000000  14 00 00 00 23 00 00 00  01 00 00 00 01 00 00 00  |....#...........|
00000010  01 00 00 00 01 00 00 00  0c 00 00 00 3c 43 74 72  |............<Ctr|
00000020  6c 3e 3c 41 6c 74 3e 63                           |l><Alt>c|
00000028

... after removing  ~/.glipper/prefs and restarting glipper (this time
with no problem), the newly created file looks like:

# hexdump -C ~/.glipper/prefs
00000000  14 00 00 00 23 00 00 00  01 00 00 00 01 00 00 00  |....#...........|
00000010  01 00 00 00 01 00 00 00  0c 00 00 00 00 00 00 00  |................|
00000020  3c 43 74 72 6c 3e 3c 41  6c 74 3e 63              |<Ctrl><Alt>c|
0000002c

ThIt seems to me, that the String "<Ctrl><Alt>c" has been serialized by
writing a little-endian string length in an architecture-specific way:

i386: 0c 00 00 00
x86_64: 0c 00 00 00 00 00 00 00

Obviously, the x86_64 version of glipper crashed when deserializing the
prefs file from i386.

This is a real nasty upstream bug, preferences files should not be
architecture-dependent.

text or xml files are very well welcome at this point.

  TIA for fixing this one,

    Wolfgang

-- 
glipper not starting in 7.10 64-bit (segmentation fault)
https://bugs.launchpad.net/bugs/156383
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to