[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#202250: marked as done (xserver-xfree86: PCF font rasterizer can be DoSed by font in old version of xfonts-cronyx-misc (see #170413))

Your message dated Mon, 15 Jan 2007 11:32:26 +0100
with message-id <200701151132.26996.ender@debian.org>
and subject line Bug#202250: xserver-xfree86: PCF font rasterizer can be DoSed by font in old version of xfonts-cronyx-misc (see #170413)
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)
--- Begin Message --- 
Package: x-window-system
Version: 4.1.0-16
Severity: critical

My XF86Config-4 begins with the standard section
Section "Files"                                                                           
        FontPath        "unix/:7100"                    # local font server               
        # if the local font server has problems, we can fall back on these                
        FontPath        "/usr/lib/X11/fonts/misc"                                         
        FontPath        "/usr/lib/X11/fonts/cyrillic"                                     
        FontPath        "/usr/lib/X11/fonts/100dpi/:unscaled"                             
        FontPath        "/usr/lib/X11/fonts/75dpi/:unscaled"                              
        FontPath        "/usr/lib/X11/fonts/Type1"                                        
        FontPath        "/usr/lib/X11/fonts/Speedo"                                       
        FontPath        "/usr/lib/X11/fonts/100dpi"                                       
        FontPath        "/usr/lib/X11/fonts/75dpi"                                        
EndSection                                                                                

After a few minutes of playing with xfontsel, my X hanged up.
Keyboard and mouse didn't react on my action.
M-C-fX and M-C-Backspace didn't work too.

But it seems my computer was still alive because I was able connect to it
from a remote host. I did it and a top of top looked like this

24622 root      20 -10  326M  24M 10392 R <  99.2  2.4  38:22 XFree86
                        ^^^^


After I killed this process, my work station became absolutely unusable
and I rebooted it.

I'm not sure but it seems to me this happened because of broken X Font Server.

-- System Information
Debian Release: 3.0
Architecture: i386
Kernel: Linux cheusov 2.4.18 #2 ×òâ Èşë 3 23:49:38 EEST 2003 i686
Locale: LANG=ru_RU.cp1251, LC_CTYPE=ru_RU.cp1251

Versions of packages x-window-system depends on:
ii  lbxproxy                      4.1.0-16   Low Bandwidth X (LBX) proxy server
ii  proxymngr                     4.1.0-16   X proxy services manager
ii  twm                           4.1.0-16   Tab window manager
ii  x-window-system-core          4.1.0-16   X Window System core components
ii  xdm                           4.1.0-16   X display manager
ii  xfs                           4.1.0-16   X font server
ii  xfwp                          4.1.0-16   X firewall proxy server
ii  xnest                         4.1.0-16   nested X server
ii  xprt                          4.1.0-16   X print server
ii  xspecs                        4.1.0-16   X protocol, extension, and library
ii  xterm                         4.1.0-16   X terminal emulator
ii  xvfb                          4.1.0-16   virtual framebuffer X server

--- End Message ---
--- Begin Message --- 
El lunes, 15 de enero de 2007 10:42, Aleksey Cheusov escribió:
> > Hi Aleksey,
> >
> > About 3 years ago, you reported a bug to the Debian BTS regarding a
> > DoS in the PCF font rasterizer. Did you reproduce this problem
> > recently? If not, I will close this bug in the next weeks.
>
> Sarge contains xfonts-cronyx-misc version 2.3.8-4 which is fine.
> You may close the bug.

	Thank you for your reply.  Closing the bug per submitter's request.

	Best regards,


		Ender.
-- 
I am a married potato! I am a married potato!
		-- Mr. Potato (Toy Story 2).
--
Desarrollador de Debian
Debian developer

Attachment: pgpDhNsGsLiC7.pgp
Description: PGP signature


--- End Message ---
Reply to: