debcrafters-packages team mailing list archive

[Benjamin Smith <2068762@xxxxxxxxxxxxxxxxxx>]

Hi, I've also encountered this problem.  I've attached a patch with a
utf-8 character in a filename which gives the same "buffer overflow"
error.

I believe this is resolved in diffstat 1.68, but I'm experiencing this
with diffstat_1.66-1build1 from Noble.  It would be good to get an
updated package for Noble.

In the meantime, using "LANG=C" appears to be sufficient to avoid the
problematic code.

Here's a couple of issues elsewhere that seem to identify the problem:
https://bugzilla.redhat.com/show_bug.cgi?id=2362049 and
https://sourceware.org/bugzilla/show_bug.cgi?id=32899

** Bug watch added: Red Hat Bugzilla #2362049
   https://bugzilla.redhat.com/show_bug.cgi?id=2362049

** Bug watch added: Sourceware.org Bugzilla #32899
   https://sourceware.org/bugzilla/show_bug.cgi?id=32899

** Attachment added: "diffstat.input"
   https://bugs.launchpad.net/ubuntu/+source/diffstat/+bug/2068762/+attachment/5883705/+files/diffstat.input

-- 
You received this bug notification because you are a member of
Debcrafters packages, which is subscribed to diffstat in Ubuntu.
https://bugs.launchpad.net/bugs/2068762

Title:
  diffstat assert failure: *** buffer overflow detected ***: terminated

Status in diffstat package in Ubuntu:
  Confirmed

Bug description:
  $ debdiff adsys*dsc | diffstat
  gpgv: Signature made Thu Jun  6 05:46:03 2024 PDT
  gpgv:                using DSA key DD00EF8F4D23C30D78EC990998B24A9CE4AC208E
  gpgv: Can't check signature: No public key
  dpkg-source: warning: cannot verify inline signature for /tmp/adsys_0.14.1~22.04.dsc: no acceptable signature found
  gpgv: Signature made Tue Jul  4 10:39:13 2023 PDT
  gpgv:                using RSA key E2A94CC41C753DEC7874962EC537E004805EE657
  gpgv: Can't check signature: No public key
  dpkg-source: warning: cannot verify inline signature for /tmp/adsys_0.9.2~22.04.2.dsc: no acceptable signature found
  *** buffer overflow detected ***: terminated
  Aborted (core dumped)
  $

  ProblemType: Crash
  DistroRelease: Ubuntu 24.04
  Package: diffstat 1.66-1build1
  ProcVersionSignature: Ubuntu 6.8.0-31.31-generic 6.8.1
  Uname: Linux 6.8.0-31-generic x86_64
  NonfreeKernelModules: lkp_Ubuntu_6_8_0_31_31_generic_104 zfs
  ApportVersion: 2.28.1-0ubuntu3
  Architecture: amd64
  AssertionMessage: *** buffer overflow detected ***: terminated
  CasperMD5CheckResult: unknown
  CurrentDesktop: ubuntu:GNOME
  Date: Fri Jun  7 12:29:49 2024
  Dependencies:
   gcc-14-base 14-20240412-0ubuntu1
   libc6 2.39-0ubuntu8.2
   libgcc-s1 14-20240412-0ubuntu1
   libidn2-0 2.3.7-2build1
   libunistring5 1.1-2build1
  ExecutablePath: /usr/bin/diffstat
  InstallationDate: Installed on 2019-12-23 (1628 days ago)
  InstallationMedia: Ubuntu 19.10 "Eoan Ermine" - Release amd64 (20191017)
  JournalErrors: Jun 07 12:29:42 hostname sudo[2235834]: pam_krb5(sudo:setcred): (user username) credential reinitialization in a setuid context ignored
  ProcCmdline: diffstat
  RebootRequiredPkgs: Error: path contained symlinks.
  Signal: 6
  SignalName: SIGABRT
  SourcePackage: diffstat
  StacktraceTop:
   __libc_message_impl (fmt=fmt@entry=0x7776e5ec5765 "*** %s ***: terminated\n") at ../sysdeps/posix/libc_fatal.c:132
   __GI___fortify_fail (msg=msg@entry=0x7776e5ec574c "buffer overflow detected") at ./debug/fortify_fail.c:24
   __GI___chk_fail () at ./debug/chk_fail.c:28
   __mbsrtowcs_chk (dst=<optimized out>, src=<optimized out>, len=<optimized out>, ps=<optimized out>, dstlen=<optimized out>) at ./debug/mbsrtowcs_chk.c:27
   ?? ()
  Title: diffstat assert failure: *** buffer overflow detected ***: terminated
  UpgradeStatus: Upgraded to noble on 2024-05-22 (16 days ago)
  UserGroups: adm cdrom dip libvirt lpadmin lxd plugdev sambashare sbuild src sudo
  modified.conffile..etc.apport.crashdb.conf: [modified]
  mtime.conffile..etc.apport.crashdb.conf: 2024-05-23T16:12:43.275502
  separator:

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/diffstat/+bug/2068762/+subscriptions