Bug 320253

Summary:	net-libs/libwww's md5 module breaks on 64-bit through improper types use
Product:	Gentoo Linux	Reporter:	Matthias Andree <matthias.andree>
Component:	New packages	Assignee:	No maintainer - Look at https://wiki.gentoo.org/wiki/Project:Proxy_Maintainers if you want to take care of it <maintainer-needed>
Status:	RESOLVED WONTFIX
Severity:	normal	CC:	matthias.andree, tove, treecleaner
Priority:	High
Version:	unspecified
Hardware:	AMD64
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Bug Depends on:	409545, 409549, 409551, 435196, 435200
Bug Blocks:

Description Matthias Andree 2010-05-17 19:18:35 UTC

+++ This bug was initially created as a clone of Bug #319283 +++

Analysis of Bug #319283 reveals that:

- libwww installs a libmd5.so and .a that contain an RSA based MD5 implementation.

- this MD5 implementation (in modules/md5/ in the source tarball) uses "long" for UINT4 in places where it clearly needs 32-bit unsigned integers, but it gets 64-bit integers. The code should be using uint32_t instead.

- libwww does NOT install an md5 header file

- applications linking against libmd5 fail to operate properly (and obtain fals MD5 checksums) on platforms where long isn't 32 bits.

Comment 1 Pacho Ramos gentoo-dev

2012-03-18 17:23:33 UTC

A patch or fix for that would be really appreciated now that this package is orphan :/

Comment 2 Pacho Ramos gentoo-dev

2012-03-18 17:25:27 UTC

I have just seen this is only an optional dependency of a few packages... maybe we should consider their removal since upstream doesn't maintain it for ages and has some opened bugs :-/

Comment 3 Michael Palimaka (kensington) gentoo-dev

2012-10-17 05:17:39 UTC

All ebuilds with this as a dependency has been dropped, so we can go ahead with treecleaning.

Comment 4 Michael Palimaka (kensington) gentoo-dev

2012-11-18 13:55:54 UTC

This package is now removed from the tree.