Bug 45341 – New ebuild: GNUitar, a realtime guitar effects processor

• Status: RESOLVED UPSTREAM
• Product: Gentoo Linux

[Description Keith Lea 2004-03-21 20:46:58 UTC]

GNUitar is real-time sound effects software that allows you to use your computer as a guitar processor. I suggest the category media-sound.

Reproducible: Always
Steps to Reproduce:
1.
2.
3.

[Comment 1 Keith Lea 2004-03-21 20:47:26 UTC]

Created attachment 27774 [details]
gnuitar-0.3.1.ebuild

[Comment 2 Keith Lea 2004-03-21 20:47:55 UTC]

Created attachment 27775 [details]
files/gnuitar.desktop

[Comment 3 Keith Lea 2004-03-21 20:48:30 UTC]

Created attachment 27776 [details]
files/main-icon.png

[Comment 4 Keith Lea 2004-03-21 20:49:07 UTC]

Created attachment 27777 [details, diff]
files/strncat-fix-0.3.1.diff

[Comment 5 Chris White (RETIRED) 2004-09-04 22:01:23 UTC]

Still too alpha-ish for me to want to include.  The suid root thing doesn't
sound appealing either.  If upstream can confirm a stable version and find 
a way around the intensive CPU usage (to get read of this suid root scheduling
hack) then let me know and I'll try and add it.

[Comment 6 solar (RETIRED) 2004-09-04 22:26:07 UTC]

ChrisWhite good call on this one.

A quick 2 min audit of this package src/*.c shows a few ways which possible exploitation could happen.
In gui.c for example we see code like this.

char            browser[2048] = ""
...
env_browser = getenv("BROWSER");
...
strcpy(browser, env_browser);
...
execl(browser, browser, path, NULL);

[Comment 7 Anton Romanov 2005-05-12 01:35:09 UTC]

http://www.gnuitar.com/news.php
0.3.2 is out ... could you please look at it ?

[Comment 8 Vasily 2007-03-13 17:57:30 UTC]

Created attachment 113194 [details]
gnuitar-9999.ebuild

ebuild for CVS version of GNUitar