[Aptitude-devel] Bug#916489: aptitude: corrupted cache can cause segfault on start

[Ben Hildred]

Package: aptitude
Version: 0.8.7-1
Severity: normal
Tags: lfs

Dear Maintainer,

   * What led up to the situation?
disk failure caused corrupted files including /var/lib/aptitude/pkgstates

   * What exactly did you do (or not do) that was effective (or
     ineffective)?
A complete reinstall of the relevant binary packages did nothing  to stop
segfaults on startup (including libc) but removal of the pkgstates package
restored aptitude to a functional state.

This is a very minor security issue. Sorry for the largefile flag (unrelated
bug in reportbug-gtk).




-- Package-specific info:
Terminal: screen
$DISPLAY is set.
which aptitude: /usr/bin/aptitude

aptitude version information:
aptitude 0.8.7
Compiler: g++ 6.3.0 20170415
Compiled against:
  apt version 5.0.1
  NCurses version 6.0
  libsigc++ version: 2.10.0
  Gtk+ support disabled.
  Qt support disabled.

Current library versions:
  NCurses version: ncurses 6.0.20161126
  cwidget version: 0.5.17
  Apt version: 5.0.1

aptitude linkage:
	linux-gate.so.1 (0xb770d000)
	libapt-pkg.so.5.0 => /usr/lib/i386-linux-gnu/libapt-pkg.so.5.0 (0xb70e9000)
	libncursesw.so.5 => /lib/i386-linux-gnu/libncursesw.so.5 (0xb70b4000)
	libtinfo.so.5 => /lib/i386-linux-gnu/libtinfo.so.5 (0xb7091000)
	libsigc-2.0.so.0 => /usr/lib/i386-linux-gnu/libsigc-2.0.so.0 (0xb7089000)
	libcwidget.so.3 => /usr/lib/i386-linux-gnu/libcwidget.so.3 (0xb6f86000)
	libsqlite3.so.0 => /usr/lib/i386-linux-gnu/libsqlite3.so.0 (0xb6e6d000)
	libboost_iostreams.so.1.62.0 => /usr/lib/i386-linux-gnu/libboost_iostreams.so.1.62.0 (0xb6e55000)
	libboost_filesystem.so.1.62.0 => /usr/lib/i386-linux-gnu/libboost_filesystem.so.1.62.0 (0xb6e3a000)
	libboost_system.so.1.62.0 => /usr/lib/i386-linux-gnu/libboost_system.so.1.62.0 (0xb6e33000)
	libxapian.so.30 => /usr/lib/i386-linux-gnu/sse2/libxapian.so.30 (0xb6c09000)
	libpthread.so.0 => /lib/i386-linux-gnu/libpthread.so.0 (0xb6bec000)
	libstdc++.so.6 => /usr/lib/i386-linux-gnu/libstdc++.so.6 (0xb6a72000)
	libm.so.6 => /lib/i386-linux-gnu/libm.so.6 (0xb6a1d000)
	libgcc_s.so.1 => /lib/i386-linux-gnu/libgcc_s.so.1 (0xb69ff000)
	libc.so.6 => /lib/i386-linux-gnu/libc.so.6 (0xb6847000)
	libdl.so.2 => /lib/i386-linux-gnu/libdl.so.2 (0xb6842000)
	libresolv.so.2 => /lib/i386-linux-gnu/libresolv.so.2 (0xb682a000)
	libz.so.1 => /lib/i386-linux-gnu/libz.so.1 (0xb680f000)
	libbz2.so.1.0 => /lib/i386-linux-gnu/libbz2.so.1.0 (0xb67fd000)
	liblzma.so.5 => /lib/i386-linux-gnu/liblzma.so.5 (0xb67cf000)
	liblz4.so.1 => /usr/lib/i386-linux-gnu/liblz4.so.1 (0xb67bc000)
	librt.so.1 => /lib/i386-linux-gnu/librt.so.1 (0xb67b3000)
	libuuid.so.1 => /lib/i386-linux-gnu/libuuid.so.1 (0xb67ad000)
	/lib/ld-linux.so.2 (0xb770f000)

-- System Information:
Debian Release: 9.2
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 4.9.0-8-rt-686-pae (SMP w/2 CPU cores; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages aptitude depends on:
ii  aptitude-common            0.8.7-1
ii  libapt-pkg5.0              1.4.8
ii  libboost-filesystem1.62.0  1.62.0+dfsg-4
ii  libboost-iostreams1.62.0   1.62.0+dfsg-4
ii  libboost-system1.62.0      1.62.0+dfsg-4
ii  libc6                      2.24-11+deb9u1
ii  libcwidget3v5              0.5.17-4+b1
ii  libgcc1                    1:6.3.0-18+deb9u1
ii  libncursesw5               6.0+20161126-1+deb9u1
ii  libsigc++-2.0-0v5          2.10.0-1
ii  libsqlite3-0               3.16.2-5
ii  libstdc++6                 6.3.0-18+deb9u1
ii  libtinfo5                  6.0+20161126-1+deb9u1
ii  libxapian30                1.4.3-2

Versions of packages aptitude recommends:
ii  libparse-debianchangelog-perl  1.2.0-12
ii  sensible-utils                 0.0.9+deb9u1

Versions of packages aptitude suggests:
pn  apt-xapian-index                <none>
pn  aptitude-doc-en | aptitude-doc  <none>
pn  debtags                         <none>
ii  tasksel                         3.39

-- no debconf information