[Reproducible-builds] Bug#815248: liblcms2: Writes uninitialized strings when writing named colors

Jérémy Bobbio lunar at debian.org
Sat Feb 20 12:35:37 UTC 2016


Package: liblcms2
Version: 2.6-3
Severity: normal
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: toolchain randomness

Hi!

When writing named colors, liblcms2 currently writes uninitialized memory
when the prefix, suffix, or root color name strings are not
32-characters long (including the NULL terminator). This prevents colord
from building reproducibly.

The attached patch will zero the memory before copying the profile
strings to ensure a consistent output.

-- 
Lunar                                .''`. 
lunar at debian.org                    : :Ⓐ  :  # apt-get install anarchism
                                    `. `'` 
                                      `-   
-------------- next part --------------
A non-text attachment was scrubbed...
Name: lcms2_2.6-3_dont_write_unitialized_memory.diff
Type: text/x-diff
Size: 3546 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/reproducible-builds/attachments/20160220/0cbedef3/attachment.diff>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/reproducible-builds/attachments/20160220/0cbedef3/attachment.sig>


More information about the Reproducible-builds mailing list