[Pkg-xmpp-devel] Bug#1028192: libproxy1v5: Gajim 1.6.0-1 crashes in libproxy call

[Sebastian Reichel]

Hi Martin,

On Tue, Jan 24, 2023 at 10:50:52PM +0000, Martin wrote:
> Hi Sebastian,
> 
> I wonder, if I should upload libproxy with your github patch¹ to
> experimental. Then people affected (or not affected) by the bug can test
> easily. Or you may upload, of course! :-)
> 
> Cheers
> 
> ¹ https://github.com/libproxy/libproxy/issues/199#issuecomment-1401124997

sure, feel free to upload it to experimental. FWIW I do not
understand the root cause of this issue. I'm a bit worried,
that the patch masks a security relevant bug. It would be great
if somebody with better C++ knowledge can look into this.

The bug seems quite strange considering the segmentation fault is
happening due to the destruction of an empty vector from the standard
library and only in combination with glib-networking.

FWIW long term the problem will be solved by glib-networking
removing the libproxy dependency:

https://gitlab.gnome.org/GNOME/glib-networking/-/merge_requests/205

Greetings,

-- Sebastian
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-xmpp-devel/attachments/20230125/fbb4f9d2/attachment.sig>