Source: libvdpau Version: 1.1.1-1 Severity: important Tags: patch Dear Maintainer,
recent version of libvdpau have switched from getenv() to secure_getenv(), but due to the missing definition, prototype of secure_getenv() is missing. Normally, it would return (char *) as getenv() do, but with missing prototype, compiler assumes returning of (int), which clamps 64-bit pointer to lower 32-bit part. That have no effect on 32-bit installations, but on 64-bit machines results in a corrupted pointer, and subsequent crash. Issue triggers only if system is 64-bit and DRI_PRIME environment variable set. Patch fixing the issue was already pushed to the upstream repository, in [1] just after libvdpau-1.1.1 release. Please, consider applying the patch to the package. [1] http://cgit.freedesktop.org/~aplattner/libvdpau/patch/?id=1cda354bdfd0c9ca107293b84b52f4464fdbedcc -- System Information: Debian Release: stretch/sid APT prefers testing APT policy: (500, 'testing'), (50, 'unstable'), (1, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.2.0-1-amd64 (SMP w/8 CPU cores) Locale: LANG=ru_RU.utf8, LC_CTYPE=ru_RU.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system)
