Your message dated Sun, 11 Nov 2018 16:49:58 +0000 with message-id <[email protected]> and subject line Bug#803503: fixed in strip-nondeterminism 0.45.0-1 has caused the Debian Bug report #803503, regarding libfile-stripnondeterminism-perl: substr outside of string at /usr/share/perl5/File/StripNondeterminism/handlers/zip.pm to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [email protected] immediately.) -- 803503: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=803503 Debian Bug Tracking System Contact [email protected] with problems
--- Begin Message ---Source: strip-nondeterminism Version: 0.013-1 Severity: normal I've got an error here on dh_strip_nondeterminism, it's from the buildlog of afl/1,94b-2 (unreleased), the tried-to-processed file is debian/afl/usr/share/doc/afl/vuln_samples/unzip-t-mem-corruption.zip [1]: <buildlog> dh_strip_nondeterminism substr outside of string at /usr/share/perl5/File/StripNondeterminism/handlers/zip.pm line 113. Use of uninitialized value in unpack at /usr/share/perl5/File/StripNondeterminism/handlers/zip.pm line 113. IO error: reading local extra field : at /usr/bin/dh_strip_nondeterminism line 87. Can't write to /tmp/dwjyFRebW6.zip at /usr/share/perl5/Archive/Zip/Archive.pm line 440. Archive::Zip::Archive::overwrite(Archive::Zip::Archive=HASH(0xf9eb48)) called at /usr/share/perl5/File/StripNondeterminism/handlers/zip.pm line 160 File::StripNondeterminism::handlers::zip::normalize("debian/afl/usr/share/doc/afl/vuln_samples/unzip-t-mem-corrupt"...) called at /usr/bin/dh_strip_nondeterminism line 87 eval {...} called at /usr/bin/dh_strip_nondeterminism line 87 </buildlog> Note: docs/vuln_samples/ is a special collection of files triggering vulnerabilities (the filename already says it), maybe this shows something which could be improved. Best, DS [1] https://packages.debian.org/sid/amd64/afl/filelist -- System Information: Debian Release: stretch/sid APT prefers testing APT policy: (500, 'testing') Architecture: amd64 (x86_64) Kernel: Linux 4.2.0-1-amd64 (SMP w/4 CPU cores) Locale: LANG=de_DE.utf8, LC_CTYPE=de_DE.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages libfile-stripnondeterminism-perl depends on: ii libarchive-zip-perl 1.53-1 ii perl 5.20.2-6 libfile-stripnondeterminism-perl recommends no packages. libfile-stripnondeterminism-perl suggests no packages. -- no debconf information
--- End Message ---
--- Begin Message ---Source: strip-nondeterminism Source-Version: 0.45.0-1 We believe that the bug you reported is fixed in the latest version of strip-nondeterminism, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [email protected], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Chris Lamb <[email protected]> (supplier of updated strip-nondeterminism package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [email protected]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 11 Nov 2018 17:42:30 +0100 Source: strip-nondeterminism Binary: libfile-stripnondeterminism-perl strip-nondeterminism dh-strip-nondeterminism Architecture: source all Version: 0.45.0-1 Distribution: unstable Urgency: medium Maintainer: Reproducible builds folks <[email protected]> Changed-By: Chris Lamb <[email protected]> Description: dh-strip-nondeterminism - file non-deterministic information stripper — Debhelper add-on libfile-stripnondeterminism-perl - file non-deterministic information stripper — Perl module strip-nondeterminism - file non-deterministic information stripper — stand-alone tool Closes: 803503 Changes: strip-nondeterminism (0.45.0-1) unstable; urgency=medium . * Move to SemVer <https://semver.org/> versioning scheme. * Catch invalid ZIP "local" field lengths; we were previously inherently blindly the value supplied in the ZIP file. Thanks to Daniel Stender for the report. (Closes: #803503) Checksums-Sha1: 9428438784982f59ccf71d9c5089500fce9b98e4 2540 strip-nondeterminism_0.45.0-1.dsc 392e1fb602fad7abac0c43d4615d454f183691b6 224058 strip-nondeterminism_0.45.0.orig.tar.bz2 8a9fb385cc81b753878d8fdc1778e54690afc1d9 30764 strip-nondeterminism_0.45.0-1.debian.tar.xz bb5cb13b6d3fca4b841d7feff7b3f9733f844c89 12444 dh-strip-nondeterminism_0.45.0-1_all.deb b6851cc9e42f4977ecec84b129cc39bfb1101f00 20512 libfile-stripnondeterminism-perl_0.45.0-1_all.deb 57f5ef38c93930f5beff9d86678ba84b928fb713 12704 strip-nondeterminism_0.45.0-1_all.deb 23b6f3ee9f798de8dafe13ccede690b7181210aa 6464 strip-nondeterminism_0.45.0-1_amd64.buildinfo Checksums-Sha256: 4a9b9ee3570aeceece423d38944edd674f85a94ca7acb9aa40df0cf931b73b7f 2540 strip-nondeterminism_0.45.0-1.dsc 7c29bff8be0efa6d155d23469c13cc96336406bff1dee58d521f9e8037c868ca 224058 strip-nondeterminism_0.45.0.orig.tar.bz2 823c61fa7e555c45acf854721850845cbbfc64233d754ebdf6ce8b8aa90ecdcd 30764 strip-nondeterminism_0.45.0-1.debian.tar.xz 5a503a160a39835c5ead95aa8b8d9192cfd3e0454ef1c29c08b31409230f4687 12444 dh-strip-nondeterminism_0.45.0-1_all.deb 25ce999117b69610cd5f201ef3b1dd73efaf7484b6105d67579c303693dd350a 20512 libfile-stripnondeterminism-perl_0.45.0-1_all.deb 394de2c4b0a4f189c185729e673f6d8bed54470593defc86535c2b33a831af9f 12704 strip-nondeterminism_0.45.0-1_all.deb ea0ef93b61d1dec8cb90e7245b440d1d1f8a71428b32df6d991b8ba7f8dd1e38 6464 strip-nondeterminism_0.45.0-1_amd64.buildinfo Files: 173142e8687e56787c8e343864d8f46b 2540 devel optional strip-nondeterminism_0.45.0-1.dsc e9249e2975c8408e5320e60ba8bd8f30 224058 devel optional strip-nondeterminism_0.45.0.orig.tar.bz2 f311783a473b8fd38a98f1fc95ab4dd9 30764 devel optional strip-nondeterminism_0.45.0-1.debian.tar.xz 9bf7300269e07c4b4f7984808a181259 12444 devel optional dh-strip-nondeterminism_0.45.0-1_all.deb e37781d290e69b5d09933e9765970daf 20512 perl optional libfile-stripnondeterminism-perl_0.45.0-1_all.deb e14a4dc4f297e0110583e8ecc693629a 12704 devel optional strip-nondeterminism_0.45.0-1_all.deb 31422d98b430e7313eba1dd83a3403c4 6464 devel optional strip-nondeterminism_0.45.0-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAlvoXFcACgkQHpU+J9Qx HliFUQ/+OJDkvYIl6urhmWUXv4LBMwHxVreEdOQn/ofK5KCJnkfX9Er9ETgRRihj SekboVj9UmnndxL6z5U+6+Jn0rLhpEsaarxb7tSfrEBUVvnXKSpEOZ6pnFzS8CKV jA+e0dU2a9Z2aXlpYBQCtn/7eB8T+liavhRkZfi5HecGv6rkA8efj0jxviMAJOvB 8wC5I2M7NIe4el4R2CE/qsTkFDOaeRypqkWnlsa5zD4YOxyRxwGyqQjuNRK4a7wS MixI5qmrZcUbsTy8emr3fdhs1OpRiWOSBglJA9+uXJZLX7vVUldf0HcgvITkD5Rg VKOAKG7y9HXwH9Y+6hmAK57iF7UAXLzuTOPF/Td/Xo1j6kAqBBWwoiITolLIth3o Tk+CkYz2MdhRdrnNEoTTV/l03JY0u+CELPHJuIhL9Ji2y/UHhgeDOp8WSh8HBvKi aUVLNmDWbHmQTcv59CyzcDky6RRqy9/3uU8UYLhrrULJVXvZHk/WiljDY8keUOYK WzJ6q78Cko+Cus/spIm72/cnj6Nl6Zn1nRGmJI8tcmo3bO/o23Tn9OtfCv6dyC6s +bGPZVSttriSb8UGNfrCQcQY6w3qknQsjfd46mYsEynt4p0/SBWClSXZ4SMGgikx HVMawWSPu+qXW7lhOtIrlP7sESpoDlPpL7P9N1jkNuN7r83Voe4= =lwu4 -----END PGP SIGNATURE-----
--- End Message ---
