sponsoring request: snoopy

Lukas Schwaighofer lukas at schwaighofer.name
Sun Aug 27 21:29:19 UTC 2017


Hi,

On Sun, 27 Aug 2017 23:18:41 +0200
Hilko Bengen <bengen at debian.org> wrote:

> * Lukas Schwaighofer:
> 
> > I've just fixed the FTBFS on GCC-7 for snoopy in our git
> > repository.  
> 
> I have just uploaded your snoopy/2.4.6-2 package.

I think Gianfranco beat you to it ;) .

> > I've seen that Marcos had opened an issue ~3 weeks ago [1] and
> > shortly before that an arch user had created a pull request to fix
> > the issue [2].  
> 
> Looking at the patch, I suspected that the author had intended
> something other than comparing a pointer to '\0'. It's probably a
> good idea to keep watching that pull request.

I'm pretty sure the patch is correct.  If snoopy_inputdatastorage->argv
points to the actual argv passed to the program, is guaranteed to be
terminated by a NULL pointer:

  "A null pointer always follows the last element: argv[argc] is this
   null pointer." [1].

Regards
Lukas

[1] https://www.gnu.org/software/libc/manual/html_node/Program-Arguments.html
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-security-team/attachments/20170827/ab5b2273/attachment.sig>


More information about the Pkg-security-team mailing list