maximilian attems wrote:
 > you don't seem to use the debian cdrecord package,
try out, self compiled binaries are not supported by debian.
debian's cdrecord -version shows an different input.

if it still doesn't work, please provide full debian version with
$ dpkg -l <packge>
for example
dpkg -l cdrecord


Everything I have checked points to the conclusion the version of CDrecord on my system is the current debian version.


As demonstrated here (d is the host name of apt-proxy):

[EMAIL PROTECTED]:~$ sudo apt-get update
Hit http://d testing/contrib Packages
Hit http://d testing/contrib Release
Hit http://d testing/main Packages
Hit http://d testing/main Release
Hit http://d testing/contrib Sources
Hit http://d testing/contrib Release
Get:1 http://d testing/main Sources [1289kB]
Hit http://d testing/main Release
Hit http://d unstable/contrib Packages
Hit http://d unstable/contrib Release
Hit http://d unstable/main Packages
Hit http://d unstable/main Release
Hit http://d unstable/contrib Sources
Hit http://d unstable/contrib Release
Get:2 http://d unstable/main Sources [1385kB]
Hit http://d unstable/main Release
Hit http://d testing/main Packages
Hit http://d testing/main Release
Fetched 2674kB in 2s (1116kB/s)
Reading Package Lists... Done
[EMAIL PROTECTED]:~$ apt-show-versions -a cdrecord
cdrecord 4:2.01+01a01-2 install ok installed
cdrecord 4:2.01+01a01-2 testing
cdrecord 4:2.01+01a01-2 unstable
cdrecord/testing uptodate 4:2.01+01a01-2
[EMAIL PROTECTED]:~$ cdrecord --version
Cdrecord-Clone 2.01.01a01 (i686-pc-linux-gnu) Copyright (C) 1995-2004 Jörg Schilling....
[EMAIL PROTECTED]:~$ dpkg -l cdrecord
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Installed/Config-files/Unpacked/Failed-config/Half-installed
|/ Err?=(none)/Hold/Reinst-required/X=both-problems (Status,Err: uppercase=bad)
||/ Name Version Description
+++-=========================-=========================-==================================================================
ii cdrecord 2.01+01a01-2 command line CD writing tool
[EMAIL PROTECTED]:~$



And this corresponds with the debian web page:http://packages.debian.org/testing/otherosfs/cdrecord



Given that both growisofs and cdrecord exhibit the same problem, and the problem shows on kernel 2.6.10 and 2.6.11 and does not show up on 2.6.9, it is almost certainly a kernel related problem.


Even if another version of cdrecord or growisofs did not exhibit the same problem, the bug will still exist, albeit in a different form, as a local Denial Of Service vulnerability.

This bug could, for example, be a problem with ide-scsi. ide-scsi may, for example, write incoming data blocks over random memory locations instead of to a correct memory location for passing to the CD writer.





Reply via email to