Your message dated with message-id <20100909203528.4772.62981.mass-bugs-close@merkel.debian.org> and subject line nstx removed from Debian unstable has caused the Debian Bug report #259339, regarding nstx: return value of malloc() is never checked anywhere to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact owner@bugs.debian.org immediately.) -- 259339: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=259339 Debian Bug Tracking System Contact owner@bugs.debian.org with problems
--- Begin Message ---
- To: Debian Bug Tracking System <submit@bugs.debian.org>
- Subject: nstx: return value of malloc() is never checked anywhere
- From: Tino Keitel <tino.keitel@web.de>
- Date: Wed, 14 Jul 2004 07:25:41 +0200
- Message-id: <E1BkcGz-0000fO-00@dsl-082-082-143-115.arcor-ip.net>
Package: nstx Version: 1.1-beta5-2 Severity: important I did a quick grep malloc *.c in the source tree. It looks like each time malloc() is used the return value is never checked but is often used directly after that for write operations. This makes nstx very dangerous, since usually it runs as root without any authentication. The bug in http://bugs.debian.org/259079 is only one example of the resulting behaviour. In the current state, the package documentation should at least contain a big warning that nstx should be run in a chroot environment with user privileges. The latter works if the nstxd listens on an unprivileged port with incoming DNS queries redirected to this port, and with proper permissions for /dev/net/tun. -- System Information: Debian Release: testing/unstable APT prefers unstable APT policy: (500, 'unstable'), (1, 'experimental') Architecture: i386 (i686) Kernel: Linux 2.6.6-mm1 Locale: LANG=C, LC_CTYPE=de_DE@euro Versions of packages nstx depends on: ii libc6 2.3.2.ds1-13 GNU C Library: Shared libraries an -- no debconf information
--- End Message ---
--- Begin Message ---
- To: 317786-done@bugs.debian.org, 398356-done@bugs.debian.org, 428529-done@bugs.debian.org, 553297-done@bugs.debian.org, 254966-done@bugs.debian.org, 589328-done@bugs.debian.org, 553299-done@bugs.debian.org, 259339-done@bugs.debian.org, 467216-done@bugs.debian.org, 550401-done@bugs.debian.org, 515309-done@bugs.debian.org, 393339-done@bugs.debian.org, 307772-done@bugs.debian.org, 468446-done@bugs.debian.org, 459902-done@bugs.debian.org
- Cc: Sandro Tosi <morph@debian.org>
- Subject: nstx removed from Debian unstable
- From: Sandro Tosi <morph@debian.org>
- Message-id: <20100909203528.4772.62981.mass-bugs-close@merkel.debian.org>
Version: 1.1-beta6-6+rm nstx has been removed from Debian unstable: http://bugs.debian.org/595988 Closing its bugs with a Version higher than the last unstable upload. More information about this script at: http://git.debian.org/?p=users/morph/mass-bugs-close.git;a=blob_plain;f=README;hb=HEAD
--- End Message ---