[Pkg-sympa-devel] Bug#654622: Plus signs (+) in list name freeze wwsympa

Wed Jan 4 16:36:06 UTC 2012

Package: sympa
Version: 6.0.1+dfsg-4
Severity: normal

Hello,

I'm experiencing wwsympa.pl freeze when browsing on the administration pages
of a list using plus signs (+) in its name. The first administration page
displays correctly, but then wwsympa.pl seems to enter an infinite loop (the
process continues to run) and any subsequent request leads to an HTTP timeout.

It takes more than restarting the web server to recover from this crash, the
identification cookie on the user side needs to be deleted too. Probably the
list name is still present in one session variable. Renaming the list and
removing all + signs solved the problem.

But the list creation interface doesn't prevent new list to use the plus sign
again. If this is not a valid character to be used in list names, why is not
caught by the list creation interface?

Thanks for any help,

Antoine.

-- System Information:
Debian Release: 6.0.3
  APT prefers proposed-updates
  APT policy: (500, 'proposed-updates'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.29.6-domu (SMP w/2 CPU cores)
Locale: LANG=fr_BE.UTF-8, LC_CTYPE=fr_BE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages sympa depends on:
ii  adduser                3.112+nmu2        add and remove users and groups
ii  dbconfig-common        1.8.46+squeeze.0  common framework for packaging dat
ii  debconf [debconf-2.0]  1.5.36.1          Debian configuration management sy
ii  libarchive-zip-perl    1.30-3            Perl module for manipulation of ZI
ii  libc6                  2.11.2-10         Embedded GNU C Library: Shared lib
ii  libcgi-fast-perl       5.10.1-17squeeze2 CGI::Fast Perl module
ii  libcgi-pm-perl         3.49-1squeeze1    module for Common Gateway Interfac
ii  libcrypt-ciphersaber-p 0.61-4            Perl module implementing CipherSab
ii  libdbd-mysql-perl      4.016-1           Perl5 database interface to the My
ii  libdbd-pg-perl         2.17.1-2          Perl DBI driver for the PostgreSQL
ii  libdbd-sqlite3-perl    1.29-3            Perl DBI driver with a self-contai
ii  libdbi-perl            1.612-1           Perl Database Interface (DBI)
ii  libfile-copy-recursive 0.38-1            Perl extension for recursively cop
ii  libhtml-format-perl    2.04-2            format HTML syntax trees into text
ii  libhtml-stripscripts-p 1.03-1            module to filter scripts out of HT
ii  libhtml-tree-perl      3.23-2            Perl module to represent and creat
ii  libintl-perl           1.20-1            Uniforum message translations syst
ii  libio-stringy-perl     2.110-4           Perl modules for IO from scalars a
ii  libmailtools-perl      2.06-1            Manipulate email in perl programs
ii  libmime-charset-perl   1.008-1           Perl module for MIME character set
ii  libmime-encwords-perl  1.012-1           Perl interface to deal with RFC 20
ii  libmime-lite-html-perl 1.23-1            Transform HTML page into MIME emai
ii  libmime-perl           5.427-2           transitional dummy package
ii  libmime-tools-perl [li 5.428-1           Perl5 modules for MIME-compliant m
ii  libmsgcat-perl         1.03-5            Locale::Msgcat perl module
ii  libnet-ldap-perl       1:0.4001-2        client interface to LDAP servers
ii  libnet-netmask-perl    1.9015-4          parse, manipulate and lookup IP ne
ii  libregexp-common-perl  2010010201-1      module with common regular express
ii  libtemplate-perl       2.22-0.1          template processing system written
ii  libterm-progressbar-pe 2.09-6            Perl module to print a progress ba
ii  libxml-libxml-perl     1.70.ds-1         Perl interface to the libxml2 libr
ii  lsb-base               3.2-23.2squeeze1  Linux Standard Base 3.2 init scrip
ii  mhonarc                2.6.16-1          Mail to HTML converter
ii  perl                   5.10.1-17squeeze2 Larry Wall's Practical Extraction 
ii  perl-modules [libcgi-p 5.10.1-17squeeze2 Core Perl modules
ii  perl-suid              5.10.1-17squeeze2 runs setuid Perl scripts
ii  postfix [mail-transpor 2.7.1-1+squeeze1  High-performance mail transport ag
ii  sqlite3                3.7.3-1           A command line interface for SQLit
ii  sysklogd [system-log-d 1.5-6             System Logging Daemon

Versions of packages sympa recommends:
ii  ca-certificates    20090814+nmu3squeeze1 Common CA certificates
ii  doc-base           0.9.5                 utilities to manage online documen
ii  locales            2.11.2-10             Embedded GNU C Library: National L
ii  locales-all [local 2.11.2-10             Embedded GNU C Library: Precompile
ii  logrotate          3.7.8-6               Log rotation utility
ii  mysql-server       5.1.49-3              MySQL database server (metapackage
ii  mysql-server-5.1 [ 5.1.49-3              MySQL database server binaries and
ii  postgresql         8.4.9-0squeeze1       object-relational SQL database (su

Versions of packages sympa suggests:
ii  apache2                2.2.16-6+squeeze4 Apache HTTP Server metapackage
ii  apache2-mpm-worker [ht 2.2.16-6+squeeze4 Apache HTTP Server - high speed th
pn  libapache2-mod-fcgid   <none>            (no description available)
ii  libsoap-lite-perl      0.712-2           Perl implementation of a SOAP clie
ii  openssl                0.9.8o-4squeeze4  Secure Socket Layer (SSL) binary a

-- Configuration Files:
/etc/logrotate.d/sympa changed [not included]
/etc/sympa/topics.conf changed [not included]

-- debconf information excluded