Bug#772005: libdevice-cdio-perl: Debian patch causes Perl crashes in Device::Cdio::ISO9660::IFS's readdir: "Error in `/usr/bin/perl': realloc(): invalid next size: 0x0000000001f05850"

[gregor herrmann]

On Thu, 04 Dec 2014 11:08:38 +0100, intrigeri at debian.org wrote:

> The reproducer script that follows, when passed the path to Tails'
> 1.2.1 ISO (http://dl.amnesia.boum.org/tails/stable/tails-i386-1.2.1/tails-i386-1.2.1.iso), 
> reliably crashes the interpreter with:
> 
>   before readdir EFI
>   after readdir EFI
>   before readdir live
>   after readdir live
>   before readdir syslinux
>   after readdir syslinux
>   before readdir tails
>   after readdir tails
>   before readdir utils
>   after readdir utils
>   before readdir isolinux
>   *** Error in `/usr/bin/perl': realloc(): invalid next size: 0x0000000001f05850 ***
> 
> Same with debian-7.2.0-amd64-i386-netinst.iso and
> debian-jessie-DI-b1-amd64-netinst.iso.

I can confirm the coredump (with a different ISO).
 
> If I drop 04_wrong_handling_of_output_parameters.patch, then it works
> fine for me. 

Confirmed as well.

> That patch was introduced in 2007 by Tincho. I suspect
> the upstream bugs it was meant to fix have been fixed in other ways
> since then. Tincho, thoughts? Do you have reproducers for these bugs?

Sorry, I have no more idea either (i.e. I don't understand the patch
:))
 

Cheers,
gregor

-- 
 .''`.  Homepage: http://info.comodo.priv.at/ - OpenPGP key 0xBB3A68018649AA06
 : :' : Debian GNU/Linux user, admin, and developer  -  http://www.debian.org/
 `. `'  Member of VIBE!AT & SPI, fellow of the Free Software Foundation Europe
   `-   NP: JBO: J.B.O.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 949 bytes
Desc: Digital Signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-perl-maintainers/attachments/20141212/d2db794c/attachment.sig>