[Pkg-xfce-devel] Bug#498770: Bug#498770: Bug#498770: Bug#498770: Bug#498770: xfce4-mpc-plugin: Segfaults on mouseover after song change
- Subject: [Pkg-xfce-devel] Bug#498770: Bug#498770: Bug#498770: Bug#498770: Bug#498770: xfce4-mpc-plugin: Segfaults on mouseover after song change
- From: huggie at earth.li (Simon Huggins)
- Date: Mon, 8 Dec 2008 17:24:35 +0000
- Message-id: <[🔎] 20081208172435.GT8289@paranoidfreak.co.uk>
- In-reply-to: <20081126121505.GE8289@paranoidfreak.co.uk>
- References: <20080913042758.21666.15210.reportbug@brennin.fionavar.dd> <20081006145341.GP14285@paranoidfreak.co.uk> <20081125020604.08ca28e3@brennin.fionavar.dd> <20081125090929.GC8289@paranoidfreak.co.uk> <20081125190927.490163a5@brennin.fionavar.dd> <20081126121505.GE8289@paranoidfreak.co.uk>
Did you get a chance to test this?
On Wed, Nov 26, 2008 at 12:15:05PM +0000, Simon Huggins wrote:
> On Tue, Nov 25, 2008 at 07:09:27PM -0500, Daniel Dickinson wrote:
> > On Tue, 25 Nov 2008 09:09:29 +0000
> > Simon Huggins <huggie at earth.li> wrote:
> > > On Tue, Nov 25, 2008 at 02:06:04AM -0500, Daniel Dickinson wrote:
> > > > On Mon, 6 Oct 2008 15:53:42 +0100
> > > > Simon Huggins <huggie at earth.li> wrote:
> > > > > I've put an i386 debug package at:
> > > > > http://the.earth.li/~huggie/xfce4-mpc-plugin-debug/
> > > > This crashes immediately after adding it, entering the connection
> > > > information, and clicking close
> > > Hmm, maybe there was something wrong with the package though I suppose
> > > it might mean that there is a buffer overflow directly in the code
> > > that deals with storing those settings.
> > > How long are your connection settings/username/password etc?
> > hostname is 6 chars + 8 char + .2char domain and the user I'm running
> > as is also 6 chars.
> > The password on the other hand is 27 characters long.
> > *** test ****
> > Okay, a shorter password clears up the problem. It is definitely
> > password length that is problem.
> Aha. Right, can you try the package at:
> http://the.earth.li/~huggie/xfce4-mpc-plugin_0.3.3-1huggie_i386.deb
> I'll file a bug with upstream tonight but there's a fairly obvious
> buffer overflow in mpd_send_password.
--
----------( Le doute est le commencement de la sagesse. )----------
Simon ----( )---- Nomis
Htag.pl 0.0.24
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/pkg-xfce-devel/attachments/20081208/e867da76/attachment.pgp
Reply to: