Bug#926392: licensecheck chokes on long lines

gregor herrmann gregoa at debian.org
Wed Jun 5 20:46:36 BST 2019


On Wed, 17 Apr 2019 07:08:00 +0000, Niels Thykier wrote:

> On Thu, 04 Apr 2019 18:13:43 +0200 Jonas Smedegaard <jonas at jones.dk> wrote:
> > Quoting Sandro Mani (2019-04-04 13:36:28)
> > > $ wget https://files.pythonhosted.org/packages/source/x/xonsh/xonsh-0.8.12.tar.gz
> > > $ tar xf xonsh-0.8.12.tar.gz
> > > $ licensecheck xonsh-0.8.12/xonsh/parser_table.py
> > > 
> > > => Licensecheck hangs eating cpu cycles (the file has lines with 33k and 
> > > 71k characters).
> > 
> > Indeed. Thanks for reporting!

> I have been digging in the code (admittedly using the master branch of
> the libregexp-pattern-license-perl and licensecheck rather than the
> packages) and basically, it is a DOS from suboptimal regex.

Thanks for your investigation, Niels!

AFAICS this is the only buster-relevant RC bug we have.
 

Jonas, my hope is that you have a chance to look into this issue, as
you are also the upstream maintainer of this module :)


Cheers,
gregor

-- 
 .''`.  https://info.comodo.priv.at -- Debian Developer https://www.debian.org
 : :' : OpenPGP fingerprint D1E1 316E 93A7 60A8 104D  85FA BB3A 6801 8649 AA06
 `. `'  Member VIBE!AT & SPI Inc. -- Supporter Free Software Foundation Europe
   `-   
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 963 bytes
Desc: Digital Signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-perl-maintainers/attachments/20190605/c57d1eb8/attachment.sig>


More information about the pkg-perl-maintainers mailing list