[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re[2]: My own libc6 progress, and package adoption drive. Give me an account on master!



| On Friday, 2 January 98, at 12:15:19 AM
| Bruce wrote about "My own libc6 progress, and package adoption drive.  Give me an account on master!"
--- pacman-10.orig/board.cc
+++ pacman-10/board.cc
@@ -119,7 +119,7 @@
  oldtemp=oldlist;
  while (oldtemp) {     //delete elements in the now previous sprite list
   oldnext=oldtemp->next;
-  delete oldnext;
+  delete oldtemp;
   oldtemp=oldnext;
  }
 if (zero && oldlist) { //personal thingie used for debug, not useful
> The memory doesn't necessarily go away when you free or delete an object,
> unless you are running Electric Fence. Thus, it's perfectly possible
> that the program would work sometimes, with some libraries.

oldtemp is the current item.  oldnext comes after it.  When nothing is next, it
exits like it should.  The problem is that it is deleting what comes next, then
trying to get that address, which is most likely ok.  However, what is at that
address might be change, and so when it returns to the top of the loop, to get
the next oldnext, it gets something unusal, and the delete call fails.  In any
case, I believe that this should be a bug with libc5, has something shouldn't
be referenced after it is deleted.

This was obviously a typo, and the old libc5 allowed a badly written program to
continue working.  When that happens, you have buffer overruns, security
breaks, etc.

> By the way, the security folks said they got your new maintainer application
> four days ago and are processing it. They usually take longer than that.

Cool!  I got a phone call last night from someone about that.  I had been sent
an email, saying that I should send my key to pgp.net.  However, it was not
mentioned in the docs on the web site that this should be done.  If it had, I
would have already done it and saved some time.  From the same docs, it said
that to verify who I was, I could get my key signed from some other debian
developer.  I contacted Ben Pfaff, who lives about 35 minutes away, and he
signed it.  I then included it into an email, signed said email, and mailed it
to new-developer.  In the documentation, it said that that would be enough.  I
didn't know that a phone call would also have to be placed.  This resulted in
more delay, also.

>         Thanks

No prob.  I love programming, and so I thought it would be fun to try to work
on the 'difficult' programs.  I got pacman to work, and omirr also compiles
now.  I might go back through all the packages that I am doing, in attempt to
make the libc6 patches uniform, and to make some type of informal howto(most
likely to be used by myself).


Get a maintainable operating system:  http://www.debian.org

Adam Heath of Borg-Linux adam.heath@usa.net Join the H.323 effort.  Email
http://www.debian.org - Get Your Own Linux! h.323-request@cichlid.com with
http://wwp.mirabilis.com/3375265 - Page Me  the word subscribe in the body.


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
debian-devel-request@lists.debian.org . 
Trouble?  e-mail to templin@bucknell.edu .


Reply to: