Bug#871649: lv2-dev: abuse of non portable pointer of uint8_t type

[Jaromír Mikeš]

2017-08-11 20:20 GMT+02:00 Joël Krähemann <jkraehemann at gmail.com>:

> Hi
>
> For sure you can cast any pointer. But feels somehow wrong. The
> opinion was the specs
> are always correct.
>
> Bests,
> Joël
>
>
> On Fri, Aug 11, 2017 at 8:12 PM, Jaromír Mikeš <mira.mikes at gmail.com>
> wrote:
> >
> >
> > 2017-08-10 16:23 GMT+02:00 Joël Krähemann <jkraehemann at gmail.com>:
> >>
> >> Hi James,
> >>
> >> It is common that you use for storing uint8_t an entire word.
> >> The use of a uint8_t pointer confused me as you are pointing
> >> to a struct.
> >>
> >> Bests,
> >> Joël
> >>
> >>
> >> On Thu, Aug 10, 2017 at 4:10 PM, James Cowgill <jcowgill at debian.org>
> >> wrote:
> >> > Hi,
> >> >
> >> > On 10/08/17 08:31, Joël Krähemann wrote:
> >> >> Package: lv2-dev
> >> >> Version: 1.14.0~dfsg1-1
> >> >> Severity: important
> >> >>
> >> >> Dear Maintainer,
> >> >>
> >> >> The following header makes use of smallest possible pointer in
> >> >> LV2_Event_Buffer struct's data field.
> >> >>
> >> >> lv2/lv2plug.in/ns/ext/event/event.h
> >> >>
> >> >> Please change it to biggest possible pointer. It should be definitely
> >> >> void* type because the memory
> >> >> pointed by data shall contain another struct LV2_Event.
> >> >>
> >> >> This describes an integer overflow. There shouldn't be any overflow.
> >> >
> >> > I'm afraid I don't see what the problem is here, or where the integer
> >> > overflow is. The data field is casted to an appropriate pointer type
> >> > whenever it is used and doing that is portable if you're careful.
> >>
> >
> > Hi Joel,
> >
> > You still think it is a bug?
> > Did you contacted upstream author about this issue already?
> >
> > best regards
> >
> > mira
> >
>

@ Joel as you didn't my second question I'm assuming you didn't contacted
upstream author yet.

Hi David,

can you please comment on this bug which we have opened in debian against
lv2-dev package?
I am not sure what to do with it.

best regards

mira
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-multimedia-maintainers/attachments/20170811/3f7b9a8c/attachment-0001.html>