Developers of Sympa

[address@concealed (Jérôme Marant)]

Hi,

  Here the nswer I got from a Perl coder, following the critical bug
  related to a buffer overflow.

  http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=165799

  I'll try to get additional information.

  Cheers,

--- Begin Message ---

• From: Adam Heath <address@concealed>
• To: Jérôme Marant <address@concealed>
• Cc: <address@concealed>
• Subject: Re: Possible regexp bug in 5.8
• Date: Thu, 30 Jan 2003 00:44:18 -0600 (CST)
• Resent-date: Thu, 30 Jan 2003 00:55:21 -0600 (CST)
• Resent-from: address@concealed

On Tue, 14 Jan 2003, Jérôme Marant wrote:

>
> Hi,
>
> Sympa, a Perl application, has a critical bug, see #165799.
> Its upstream who run 5.6 tried to reproduce the problem
> but failed. They told me they definitely think it is a
> Perl 5.8 regexp bug, but cannot provide more information.
> What should I do? Is it a known bug?

Perl 5.8 is different. The code does things differently. Different methods
are called.

In short, you'll need to fix the code.

In detail, install-info(from dpkg) had a similiar problem with perl 5.8. The
reason is that it had an unbounded {*} pattern, and with certain large inputs,
would overflow the stack. This is because in perl 5.8, more stack space is
used, so the limit was reached sooner. It was never reached with 5.6 and this
particular input.

Check the dpkg changelog to find the bug#.


--
To UNSUBSCRIBE, email to address@concealed
with a subject of "unsubscribe". Trouble? Contact address@concealed


--- End Message ---

-- 
Jérôme Marant

http://marant.org