Package: libpcre3
Version: 1:8.30-5
Severity: grave
Tags: patch
Justification: causes non-serious data loss

Dear Maintainer,

when compiling the regular expression

regex_t rx;
regcomp(&rx, "^(\\(\\))? *(.*)$", 0)

I get the large value 140733193388034 for rx.re_nsub. As this value is often
used afterwards in malloc this normally leads to the termination of the
programm (either because of the segfault or due to the assumption of no free
memory), so unsaved data gets lost.

The problem is well known
(http://www.exim.org/lurker/message/20120822.143744.147fd5d2.de.html)
and a patch exists (http://bugs.exim.org/attachment.cgi?id=586). I can
confirm that the patch works.

Please consider applying the patch.

Cheers
Patrick

-- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (900, 'testing'), (500, 'testing-proposed-updates'), (500, 
'stable-updates'), (400, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-3-amd64 (SMP w/6 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages libpcre3 depends on:
ii  libc6              2.13-35
ii  multiarch-support  2.13-35

libpcre3 recommends no packages.

libpcre3 suggests no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to