* Sebastian Ramacher <sramac...@debian.org> [221129 11:21]:
> Source: cmark-gfm
> Version: 0.29.0.gfm.6-2
> Severity: serious
> Tags: ftbfs
> Justification: fails to build from source (but built successfully in the past)
> 
> https://buildd.debian.org/status/fetch.php?pkg=cmark-gfm&arch=s390x&ver=0.29.0.gfm.6-2&stamp=1666810004&raw=0
> 
> --- expected HTML
> +++ actual HTML
> @@ -7,15 +7,15 @@
>  <p><a href="mailto:scyt...@pokemon.com";>scyt...@pokemon.com</a>/<a 
> href="mailto:beedr...@pokemon.com";>beedr...@pokemon.com</a></p>
>  <p><a href="mailto:scyt...@pokemon.com";>mailto:scyt...@pokemon.com</a></p>
>  <p>This is a <a 
> href="mailto:scyt...@pokemon.com";>mailto:scyt...@pokemon.com</a></p>
> -<p><a href="mailto:scyt...@pokemon.com";>mailto:scyt...@pokemon.com</a>.</p>
> +<p>mailto:<a href="mailto:scyt...@pokemon.com";>scyt...@pokemon.com</a>.</p>

This is caused by an out-of-bounds read on a memory buffer, which
seems to be masked by stack layout on little-endian archs(?).

PR for upstream is here:
https://github.com/github/cmark-gfm/pull/296/files

I've verified on zelenka.d.o this fixes the build failure.

Chris

Reply via email to