[ Impact ]

 * Users of the m2crypto library on i386 face potential breakage since
the timeout code in SSL doesn't account for t64 support.

 * This was causing autopkgtests failures and is currently regressed in
baseline.

 * The proposed patch uses "long long" instead of "long" when packing
time values that are used as   arguments to library calls that use
time_t structures but excludes i386 and i686 from this new behavior
since support for t64 hasn't been added for those architectures.

[ Test Plan ]

 * Test by running the test suite (or the autopkgtests) on an armhf
system will cause tests to fail.

 * the failed test can be run by issuing `python3 -munittest -v
tests.test_ssl.MiscSSLClientTestCase` or by running the autopkgtests.

 * after applying the patch, running the autopkgtest suite both in an
armhf and an i386 host.

[ Where problems could occur ]

 * The package features an example SSL connection client which uses the
affected code. In case of further breakage caused by the patch, users of
that SSL client would be affected.

[ Other Info ]
 
 * This has been fixed in Oracular and in Debian.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2059156

Title:
  proposed-migration for m2crypto 0.40.1-2build1

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/m2crypto/+bug/2059156/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to