Package: libconvert-uulib-perl
Version: 1:1.4~dfsg-1
Usertags: goto-cc

During an analysis of all packages using our research compiler tool-chain (using
tools from the cbmc package) the following error was found:

The declaration of UUEncodePartial here

http://sources.debian.net/src/libconvert-uulib-perl/1:1.4~dfsg-1/UUlib.xs?hl=409#L409

lacks the final argument (it takes only 9 arguments), as can be seen by
comparing to its definition:

http://sources.debian.net/src/libconvert-uulib-perl/1:1.4~dfsg-1/uulib/uuencode.c?hl=788#L788

Thus the generated perl-to-native wrapper only converts and passes 9 arguments,
which necessarily results in a stack underflow (the argument is used). The
resulting undefined behaviour will likely show up as seemingly random failures
in testing the CRC values.

Best,
Michael

Attachment: pgpt3KZFWbh45.pgp
Description: PGP signature

Reply via email to