[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#909632: marked as done (pngmeta: segfault on bad png)



Your message dated Mon, 07 Mar 2022 17:25:57 +0000
with message-id <E1nRH7N-0006i8-7f@fasolo.debian.org>
and subject line Bug#909632: fixed in pngmeta 1.11-10
has caused the Debian Bug report #909632,
regarding pngmeta: segfault on bad png
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
909632: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=909632
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Package: pngmeta
Version: 1.11-9
Severity: normal
File: /usr/bin/pngmeta

With file https://www.gutenberg.org/files/16713/16713-h/images/q248.png
(about 7 kbytes), running "pngmeta q248.png" gets a segfault.

I suspect some badness in that image, since some other programs don't
enjoy it either (xzgv "can't load", dillo "checksum error"), but I hoped
pngmeta would not segfault.

gdb gives a backtrace showing somewhere under the final
png_destroy_read_struct() call in pngmeta.c main().

    #0  0xb7f8367a in png_free_data () from /usr/lib/i386-linux-gnu/libpng16.so.16
    #1  0xb7f83ce2 in png_destroy_info_struct ()
       from /usr/lib/i386-linux-gnu/libpng16.so.16
    #2  0xb7f9022d in png_destroy_read_struct ()
       from /usr/lib/i386-linux-gnu/libpng16.so.16
    #3  0x80001b39 in main (argc=<optimized out>, argv=<optimized out>)
        at pngmeta.c:588


-- System Information:
Debian Release: buster/sid
Architecture: i386 (i686)

Kernel: Linux 4.4.0-1-686-pae (SMP w/1 CPU core)
Locale: LANG=en_AU.iso88591, LC_CTYPE=en_AU.iso88591 (charmap=ISO-8859-1), LANGUAGE=en_AU:en_GB:en (charmap=ISO-8859-1)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages pngmeta depends on:
ii  libc6        2.27-6
ii  libpng16-16  1.6.34-2
ii  zlib1g       1:1.2.11.dfsg-1

pngmeta recommends no packages.

pngmeta suggests no packages.

-- no debconf information

--- End Message ---
--- Begin Message ---
Source: pngmeta
Source-Version: 1.11-10
Done: Andreas Tille <tille@debian.org>

We believe that the bug you reported is fixed in the latest version of
pngmeta, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 909632@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Andreas Tille <tille@debian.org> (supplier of updated pngmeta package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 07 Mar 2022 17:28:13 +0100
Source: pngmeta
Architecture: source
Version: 1.11-10
Distribution: unstable
Urgency: medium
Maintainer: Debian PhotoTools Maintainers <pkg-phototools-devel@lists.alioth.debian.org>
Changed-By: Andreas Tille <tille@debian.org>
Closes: 909632
Changes:
 pngmeta (1.11-10) unstable; urgency=medium
 .
   * Take over package into Debian Photo Tools team
   * Add Homepage
   * Add watch file
   * debian/source/format: 3.0 (quilt)
   * DEP5
   * d/rules: Short dh
   * Fix segfault on bad png
     Closes: #909632
   * Standards-Version: 4.6.0 (routine-update)
   * debhelper-compat 13 (routine-update)
   * Remove trailing whitespace in debian/copyright (routine-update)
   * Add salsa-ci file (routine-update)
   * Rules-Requires-Root: no (routine-update)
Checksums-Sha1:
 9f25c228d21d385d9e541b0ba1f68911fe3b447a 1980 pngmeta_1.11-10.dsc
 caf92f22736420c93f60ad90ef3279a508c9f213 8552 pngmeta_1.11-10.debian.tar.xz
 b8a430b50b3b57cb08fd08c865d4eb65bdc58d0b 6151 pngmeta_1.11-10_amd64.buildinfo
Checksums-Sha256:
 20fd11191e805bbb4bce6a80a03099c83ad684499117ffe58bf356861011d102 1980 pngmeta_1.11-10.dsc
 82865a60a1ba25055d3eddf74e8ce45b90007f5dc10dc64d0fbf95bd0f25cdd2 8552 pngmeta_1.11-10.debian.tar.xz
 281f6ca4087816837de96b767b68750be0081aa0656f5691d4a9b343fb3ad2e6 6151 pngmeta_1.11-10_amd64.buildinfo
Files:
 e2cac76723c80542818c0105fc0a5c68 1980 graphics optional pngmeta_1.11-10.dsc
 ee66c40022dbfa2a384719e55ab4f2ac 8552 graphics optional pngmeta_1.11-10.debian.tar.xz
 ff245e19c91364951c6cef553fae8586 6151 graphics optional pngmeta_1.11-10_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=EbQT
-----END PGP SIGNATURE-----

--- End Message ---

Reply to: