[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#809838: [apt] Download size check overflow



Package: apt
Version: 1.1.5
Severity: normal

--- Please enter the report below this line. ---

After a few weeks without updates, running `apt-get dist-upgrade` failed with 
the following massage:

[...]
724 upgraded, 0 newly installed, 0 to remove and 187 not upgraded.
18446744072246931048,2832346728
How odd... The sizes didn't match, email apt@packages.debian.org
Need to get 18.4 EB of archives.
After this operation, 77.8 MB of additional disk space will be used.
E: You don't have enough free space in /var/cache/apt/archives/.
[...]

Upgrading all texlive-* packages and then trying again worked.  This looks 
suspiciously like a 32bit overflow (log2(2832346728) ~ 31.4, 18.4EB ~ 2^64B), 
combined with casting to 64bit later in the process, also the upgrade download 
size was something below 2GB _after_ upgrading the texlive packages manually.

--- System information. ---
Architecture: amd64
Kernel:       Linux 4.2.0-1-amd64

Debian Release: stretch/sid
  500 testing         www.deb-multimedia.org 
  500 testing         security.debian.org 
  500 testing         ftp5.gwdg.de 
  500 stretch         neurodebian.ovgu.de 
  500 data            neurodebian.ovgu.de 

--- Package information. ---
Depends                       (Version) | Installed
=======================================-+-=============
libapt-pkg4.12             (>= 1.0.9.6) | 1.0.9.10
libc6                         (>= 2.15) | 
libgcc1                    (>= 1:4.1.1) | 
libstdc++6                     (>= 4.9) | 
debian-archive-keyring                  | 
gnupg                                   | 


Package's Recommends field is empty.

Suggests         (Version) | Installed
==========================-+-============
aptitude                   | 0.6.11-1+b1
 OR synaptic               | 0.82
 OR wajig                  | 
dpkg-dev       (>= 1.17.2) | 1.18.4
apt-doc                    | 
python-apt                 | 1.1.0~beta1



--- Output from package bug script ---
-- 
Max-Planck-Institute for Dynamics and Self-Organization
Research Group Biomedical Physics

Am Fassberg 17
D-37077 Goettingen
(+49) 551 5176 373

You can obtain my public key 0xF197B128 from all keyservers, e.g. pgp.mit.edu
Fingerprint: 9698 BDD4 71CC 1274 B7E2  2049 1EDD 012D F197 B128

Attachment: signature.asc
Description: This is a digitally signed message part.


Reply to: