Package: libinfinity-0.5-0 Version: 0.5.2-1 Severity: normal Tags: patch Dear Maintainer,
InfXmlConnectionStatus, InfcBrowserStatus and InfGtkBrowserModelStatus GType registration code misses an array sentinel leading to GType reading invalid memory paste the end of the array. I also reported it to upstream: http://gobby.0x539.de/trac/ticket/592 This is a somewhat security-related issue because of the past-bounds read, and this issue can cause problems in calling apps if they lists the values of one of these enumerations through the GType mechanisms. Regards, Colomban -- System Information: Debian Release: wheezy/sid APT prefers unstable APT policy: (500, 'unstable'), (500, 'testing'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 3.2.0-2-amd64 (SMP w/4 CPU cores) Locale: LANG=fr_FR.utf8, LC_CTYPE=fr_FR.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages libinfinity-0.5-0 depends on: ii dpkg 1.16.3 ii libavahi-client3 0.6.31-1 ii libavahi-common3 0.6.31-1 ii libc6 2.13-32 ii libglib2.0-0 2.32.3-1 ii libgnutls26 2.12.19-1 ii libgsasl7 1.6.1-1 ii libpam0g 1.1.3-7.1 ii libxml2 2.8.0+dfsg1-1 libinfinity-0.5-0 recommends no packages. libinfinity-0.5-0 suggests no packages. -- no debconf information
>From ac99afb17575405d9cf80303e5463179d6e11e58 Mon Sep 17 00:00:00 2001 From: Colomban Wendling <[email protected]> Date: Wed, 30 May 2012 19:50:21 +0200 Subject: [PATCH] Fix a few enumeration type registration InfXmlConnectionStatus, InfcBrowserStatus and InfGtkBrowserModelStatus GType registration code missed an array sentinel leading to GType reading invalid memory paste the end of the array. --- libinfgtk/inf-gtk-browser-model.c | 4 ++++ libinfinity/client/infc-browser.c | 4 ++++ libinfinity/common/inf-xml-connection.c | 4 ++++ 3 files changed, 12 insertions(+) diff --git a/libinfgtk/inf-gtk-browser-model.c b/libinfgtk/inf-gtk-browser-model.c index cd3ae48..3c11e83 100644 --- a/libinfgtk/inf-gtk-browser-model.c +++ b/libinfgtk/inf-gtk-browser-model.c @@ -94,6 +94,10 @@ inf_gtk_browser_model_status_get_type(void) INF_GTK_BROWSER_MODEL_ERROR, "INF_GTK_BROWSER_MODEL_ERROR", "error" + }, { + 0, + NULL, + NULL } }; diff --git a/libinfinity/client/infc-browser.c b/libinfinity/client/infc-browser.c index 086e0f8..adf571f 100644 --- a/libinfinity/client/infc-browser.c +++ b/libinfinity/client/infc-browser.c @@ -3832,6 +3832,10 @@ infc_browser_status_get_type(void) INFC_BROWSER_CONNECTED, "INFC_BROWSER_CONNECTED", "connected" + }, { + 0, + NULL, + NULL } }; diff --git a/libinfinity/common/inf-xml-connection.c b/libinfinity/common/inf-xml-connection.c index 2efe1c8..54ad3a7 100644 --- a/libinfinity/common/inf-xml-connection.c +++ b/libinfinity/common/inf-xml-connection.c @@ -166,6 +166,10 @@ inf_xml_connection_status_get_type(void) INF_XML_CONNECTION_OPENING, "INF_XML_CONNECTION_OPENING", "opening" + }, { + 0, + NULL, + NULL } }; -- 1.7.10
