buffer overrun in gnome libraries

[Richard Black <rjb dcs gla ac uk>]

------- Forwarded Message

Return-Path:  <bugzilla@redhat.com>
Delivery-Date:  Thu, 7 Oct 1999 17:54:48 +0100
Received:  from mail.redhat.com by vanuata with SMTP (MMTA) with ESMTP;
	            Thu, 7 Oct 1999 17:54:37 +0100
Received:  from developer.redhat.com (developer.redhat.com [199.183.24.197])
	by mail.redhat.com (8.8.7/8.8.7) 
	            with ESMTP id MAA10285;	Thu, 7 Oct 1999 12:54:34 -0400
Received:  from developer.redhat.com (localhost [127.0.0.1])	by developer.re
dhat.com (8.8.7/8.8.7) 
	            with ESMTP id MAA27070;	Thu, 7 Oct 1999 12:54:34 -0400
Date:  Thu, 7 Oct 1999 12:54:34 -0400
From:  bugzilla@redhat.com
Message-Id:  <199910071654.MAA27070@developer.redhat.com>
To:  msf@redhat.com, rjb@dcs.gla.ac.uk
Subject:  [Bug 5687] New - Buffer overrun inside gnome libraries
X-Mailer:  Perl SMTP Module
X-Loop:  bugzilla@redhat.com

http://developer.redhat.com/bugzilla/show_bug.cgi?id=5687

--- shadow/5687	Thu Oct  7 12:54:33 1999
+++ shadow/5687.tmp.27066	Thu Oct  7 12:54:33 1999
@@ -0,0 +1,52 @@
+Bug#: 5687
+Product: Red Hat Linux
+Version: 6.0
+Platform: i386
+OS/Version: 
+Status: NEW   
+Resolution: 
+Severity: normal
+Priority: normal
+Component: gnome-libs
+AssignedTo: msf@redhat.com                            
+ReportedBy: rjb@dcs.gla.ac.uk               
+URL: 
+Summary: Buffer overrun inside gnome libraries
+
+There is a buffer overrun inside the gnome libraries which
+appears to be related to the hashing of metadata.db
+I have a long backtrace and an even longer strace of an
+instance of gmc getting a SEGV.  They are too long
+for here but are available at:
+
+http://www.dcs.gla.ac.uk/~rjb/gnome/
+
+The function g_concat_dir_and_file is being called
+with overlapping string arguments.
+
+I would be inclined to hypothesise that this may be the
+cause of lots of the "works for me" bug reports listed
+against gnome.
+
+This is with 6.0 plus all current updates applied:
+gnome-core-devel-1.0.7-2
+gnome-games-devel-1.0.2-11
+gnome-libs-1.0.10-2
+gnome-audio-1.0.0-6
+gnome-audio-extra-1.0.0-6
+gnome-games-1.0.2-11
+gnome-linuxconf-0.22-1
+gnome-media-1.0.1-3
+gnome-objc-1.0.2-4
+gnome-objc-devel-1.0.2-4
+gnome-pim-1.0.7-2
+gnome-pim-devel-1.0.7-2
+gnome-users-guide-1.0.5-4rh
+gnome-utils-1.0.1-6
+pygnome-1.0.1-2
+switchdesk-gnome-1.7.0-1
+gnome-core-1.0.7-2
+gnome-libs-devel-1.0.10-2
+
+I have a core dump too if anyone wants it.
+

------- End of Forwarded Message