Bug#305213: marked as done (Crashes when loading a page with a favicon, due to memory corruption)

Debian Bug Tracking System owner@bugs.debian.org
Wed, 27 Apr 2005 10:49:02 -0700


Your message dated Wed, 27 Apr 2005 19:37:52 +0200
with message-id <20050427173751.GA17700@spring.luon.net>
and subject line Bug#305213: Crashes when loading a page with a favicon, due to memory corruption
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--------------------------------------
Received: (at submit) by bugs.debian.org; 18 Apr 2005 17:25:21 +0000
>From sjoerd@luon.net Mon Apr 18 10:25:21 2005
Return-path: <sjoerd@luon.net>
Received: from simons.xs4all.nl (fire.luon.net) [80.126.201.244] (postfix)
	by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
	id 1DNZzt-0005TX-00; Mon, 18 Apr 2005 10:25:21 -0700
Received: from spring.luon.net (t-27-117.athome.tue.nl [131.155.228.117])
	by fire.luon.net (Postfix) with ESMTP id 97E2CFE96;
	Mon, 18 Apr 2005 19:25:09 +0200 (CEST)
Received: by spring.luon.net (Postfix, from userid 1000)
	id DAE7337B81; Mon, 18 Apr 2005 19:24:34 +0200 (CEST)
Content-Type: multipart/mixed; boundary="===============1655444141=="
MIME-Version: 1.0
From: Sjoerd Simons <sjoerd@luon.net>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: Crashes when loading a page with a favicon, due to memory corruption
X-Mailer: reportbug 3.9
Date: Mon, 18 Apr 2005 19:24:34 +0200
Message-Id: <20050418172434.DAE7337B81@spring.luon.net>
Delivered-To: submit@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE 
	autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 

This is a multi-part MIME message sent by reportbug.

--===============1655444141==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Package: epiphany-browser
Version: 1.6.2-1
Severity: normal
Tags: experimental patch

Hi,

  Attached patch fixes a memory corruption, caused by passing a wrong type of
  value to g_object_get (32 bit when 64 is needed).. Fixed in attached patch

  Sjoerd

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable'), (101, 'experimental')
Architecture: powerpc (ppc)
Kernel: Linux 2.6.11-spring
Locale: LANG=C, LC_CTYPE=nl_NL@euro (charmap=ISO-8859-15)

Versions of packages epiphany-browser depends on:
ii  dbus-1                0.23.4-1bindings0  simple interprocess messaging syst
ii  dbus-glib-1           0.23.4-1bindings0  simple interprocess messaging syst
ii  debconf               1.4.48             Debian configuration management sy
ii  gconf2                2.10.0-1           GNOME configuration database syste
ii  gnome-icon-theme      2.10.0-1           GNOME Desktop icon theme
ii  iso-codes             0.46-1             ISO language, territory, currency 
ii  libart-2.0-2          2.3.17-1           Library of functions for 2D graphi
ii  libatk1.0-0           1.9.0-1            The ATK accessibility toolkit
ii  libbonobo2-0          2.8.1-2            Bonobo CORBA interfaces library
ii  libbonoboui2-0        2.8.1-2            The Bonobo UI library
ii  libc6                 2.3.2.ds1-21       GNU C Library: Shared libraries an
ii  libgcc1               1:3.4.3-12         GCC support library
ii  libgconf2-4           2.10.0-1           GNOME configuration database syste
ii  libglade2-0           1:2.5.1-1          library to load .glade files at ru
ii  libglib2.0-0          2.6.4-1            The GLib library of C routines
ii  libgnome-desktop-2    2.10.1-1           Utility library for loading .deskt
ii  libgnome2-0           2.8.1-2            The GNOME 2 library - runtime file
ii  libgnomecanvas2-0     2.8.0-1            A powerful object-oriented display
ii  libgnomeui-0          2.10.0-1           The GNOME 2 libraries (User Interf
ii  libgnomevfs2-0        2.10.1-1           The GNOME virtual file-system libr
ii  libgtk2.0-0           2.6.4-1            The GTK+ graphical user interface 
ii  libice6               6.8.1-1ubuntu9.0.1 Inter-Client Exchange library
ii  liborbit2             1:2.12.1-1         libraries for ORBit2 - a CORBA ORB
ii  libpango1.0-0         1.8.1-1            Layout and rendering of internatio
ii  libpopt0              1.7-5              lib for parsing cmdline parameters
ii  libsm6                6.8.1-1ubuntu9.0.1 X Window System Session Management
ii  libstartup-notificati 0.8-1              library for program launch feedbac
ii  libstdc++5            1:3.3.5-12         The GNU Standard C++ Library v3
ii  libx11-6              6.8.1-1ubuntu9.0.1 X Window System protocol client li
ii  libxml2               2.6.16-7           GNOME XML library
ii  libxslt1.1            1.1.12-8           XSLT processing library - runtime 
ii  mozilla-browser       2:1.7.6-1          The Mozilla Internet application s
ii  mozilla-psm           2:1.7.6-1          The Mozilla Internet application s
ii  xlibs                 6.8.1-1ubuntu9.0.1 X Window System client libraries m
ii  zlib1g                1:1.2.2-4          compression library - runtime

-- no debconf information

--===============1655444141==
Content-Type: text/x-c; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment; filename="ephy.patch"

Index: embed/mozilla/mozilla-embed-persist.cpp
===================================================================
RCS file: /cvs/gnome/epiphany/embed/mozilla/mozilla-embed-persist.cpp,v
retrieving revision 1.47
diff -u -r1.47 mozilla-embed-persist.cpp
--- embed/mozilla/mozilla-embed-persist.cpp	17 Apr 2005 14:05:17 -0000	1.47
+++ embed/mozilla/mozilla-embed-persist.cpp	18 Apr 2005 17:14:19 -0000
@@ -136,7 +136,7 @@
 	nsresult rv;
 	char *filename;
 	char *uri;
-	long max_size;
+	gint64 max_size;
 	EphyEmbed *embed;
 	EphyEmbedPersistFlags flags;
 	EphyEmbedSingle *single;

--===============1655444141==--

---------------------------------------
Received: (at 305213-done) by bugs.debian.org; 27 Apr 2005 17:38:57 +0000
>From sjoerd@spring.luon.net Wed Apr 27 10:38:57 2005
Return-path: <sjoerd@spring.luon.net>
Received: from simons.xs4all.nl (fire.luon.net) [80.126.201.244] (postfix)
	by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
	id 1DQqUz-0005Qj-00; Wed, 27 Apr 2005 10:38:57 -0700
Received: from spring.luon.net (t-27-117.athome.tue.nl [131.155.228.117])
	by fire.luon.net (Postfix) with ESMTP id C4C2EFE85;
	Wed, 27 Apr 2005 19:38:49 +0200 (CEST)
Received: by spring.luon.net (Postfix, from userid 1000)
	id 279CE37C0D; Wed, 27 Apr 2005 19:37:52 +0200 (CEST)
Date: Wed, 27 Apr 2005 19:37:52 +0200
To: Sjoerd Simons <sjoerd@luon.net>, 305213-done@bugs.debian.org
Subject: Re: Bug#305213: Crashes when loading a page with a favicon, due to memory corruption
Message-ID: <20050427173751.GA17700@spring.luon.net>
References: <20050418172434.DAE7337B81@spring.luon.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20050418172434.DAE7337B81@spring.luon.net>
X-Operating-System: Linux spring 2.6.11-spring #1 Sat Mar 5 13:00:45 CET 2005 ppc GNU/Linux
User-Agent: Mutt/1.5.9i
From: sjoerd@spring.luon.net (Sjoerd Simons)
Delivered-To: 305213-done@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
	autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 

On Mon, Apr 18, 2005 at 07:24:34PM +0200, Sjoerd Simons wrote:
> Package: epiphany-browser
> Version: 1.6.2-1
> Severity: normal
> Tags: experimental patch
> 
> Hi,
> 
>   Attached patch fixes a memory corruption, caused by passing a wrong type of
>   value to g_object_get (32 bit when 64 is needed).. Fixed in attached patch
> 

Was fixed with the 1.6.3-1 upload.

  Sjoerd
-- 
Life is a biochemical reaction to the stimulus of the surrounding
environment in a stable ecosphere, while a bowl of cherries is a
round container filled with little red fruits on sticks.