Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 478216 - dev-tcltk/tcllib-1.15-r1 fails test multiplexer-5.2
Summary: dev-tcltk/tcllib-1.15-r1 fails test multiplexer-5.2
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Library (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: TCL/TK Project
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2013-07-26 08:49 UTC by Markus Walter
Modified: 2015-03-03 14:00 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments
build log (bzipped) (dev-tcltk:tcllib-1.15-r1:20130726-002212.log.bz2,114.40 KB, application/x-bzip2)
2013-07-26 08:49 UTC, Markus Walter
Details
emerge --info (info.txt,6.23 KB, text/plain)
2013-07-26 08:51 UTC, Markus Walter
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Markus Walter 2013-07-26 08:49:52 UTC
Created attachment 354232 [details]
build log (bzipped)

On my hardened ~amd64 machine with gcc-4.8.1 I see the following test failure for tcllib.

---- multiplexer-5.2 start


==== multiplexer-5.2 add access filter which denies access FAILED
==== Contents of test case:

    set ::forever {}
    set mp [multiplexer::create]
    ${mp}::Init 37465
    ${mp}::AddAccessFilter DenyAccessFilter
    set sk1 [socket localhost 37465]
    set sk2 [socket localhost 37465]
    update
    fconfigure $sk1 -buffering none
    if { [catch {
	puts $sk1 "boom"
    } err] } {
	set result "socket blocked"
    } else {
	set result "socket not blocked"
    }
    ${mp}::destroy
    set result

---- Result was:
socket not blocked
---- Result should have been (exact matching):
socket blocked
==== multiplexer-5.2 FAILED
Comment 1 Markus Walter 2013-07-26 08:51:40 UTC
Created attachment 354234 [details]
emerge --info
Comment 2 Justin Lecher (RETIRED) gentoo-dev 2015-03-03 14:00:43 UTC
+*tcllib-1.15-r2 (03 Mar 2015)
+
+  03 Mar 2015; Justin Lecher <jlec@gentoo.org>
+  +files/tcllib-1.15-XSS-vuln.patch, +files/tcllib-1.15-test.patch,
+  +files/tcllib-1.16-XSS-vuln.patch, +files/tcllib-1.16-test.patch,
+  +tcllib-1.15-r2.ebuild, +tcllib-1.16.ebuild:
+  Version Bump, #531864; fix testfailure, #478216; backport security fix,
+  #541912
+