[Pkg-xfce-devel] Bug#498770: Bug#498770: Bug#498770: Bug#498770: Bug#498770: xfce4-mpc-plugin: Segfaults on mouseover after song change

Simon Huggins huggie at earth.li
Mon Dec 8 17:24:35 UTC 2008


Did you get a chance to test this?

On Wed, Nov 26, 2008 at 12:15:05PM +0000, Simon Huggins wrote:
> On Tue, Nov 25, 2008 at 07:09:27PM -0500, Daniel Dickinson wrote:
> > On Tue, 25 Nov 2008 09:09:29 +0000
> > Simon Huggins <huggie at earth.li> wrote:
> > > On Tue, Nov 25, 2008 at 02:06:04AM -0500, Daniel Dickinson wrote:
> > > > On Mon, 6 Oct 2008 15:53:42 +0100
> > > > Simon Huggins <huggie at earth.li> wrote:
> > > > > I've put an i386 debug package at:
> > > > > http://the.earth.li/~huggie/xfce4-mpc-plugin-debug/
> > > > This crashes immediately after adding it, entering the connection
> > > > information, and clicking close
> > > Hmm, maybe there was something wrong with the package though I suppose
> > > it might mean that there is a buffer overflow directly in the code
> > > that deals with storing those settings.
> > > How long are your connection settings/username/password etc?
> > hostname is 6 chars + 8 char + .2char domain and the user I'm running
> > as is also 6 chars.

> > The password on the other hand is 27 characters long.

> > *** test ****

> > Okay, a shorter password clears up the problem.  It is definitely
> > password length that is problem.

> Aha.  Right, can you try the package at:
> http://the.earth.li/~huggie/xfce4-mpc-plugin_0.3.3-1huggie_i386.deb

> I'll file a bug with upstream tonight but there's a fairly obvious
> buffer overflow in mpd_send_password.

-- 
----------(   Le doute est le commencement de la sagesse.    )----------
Simon ----(                                                  )---- Nomis
                             Htag.pl 0.0.24
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/pkg-xfce-devel/attachments/20081208/e867da76/attachment.pgp 


More information about the Pkg-xfce-devel mailing list