[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: [SRM] Update of gnupg/gnupg2 to fix a memory leak



Daniel Leidert wrote:
Am Sonntag, den 24.05.2009, 19:37 +0200 schrieb Luk Claes:
Daniel Leidert wrote:
Hi,

In the past it had been reported several times, that importing a large
keyring (for example the Debian keyring) might need a really long time
and make gnupg allocate much memory (trying to reproduce the issue I
observed a DoS). I recently reported the issue to Werner Koch and he
found a memory leak and fixed the issue. It seems the patch applies to
gnupg (probably to 1.4.6 in oldstable too) as well as gnupg2.

Should this be fixed in stable and olstable? Then I would prepare the
packages for gnupg (CCed Eric for gnupg2).
Please upload for stable and oldstable.

A question: I have another fix I would like to apply. It fixes gnupg to
not leave the terminal in noecho-mode (#321871 [1]). The patch [2] is
pretty small. Any objections?

Except for the spelling error in Werner Koch's name, I have no objections :-)

Cheers

Luk


Reply to: