Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 914173 - app-crypt/mhash-0.9.9.9-r3 fails tests (PYTHON-3.12-SYSTEM): because of a use-after-free
Summary: app-crypt/mhash-0.9.9.9-r3 fails tests (PYTHON-3.12-SYSTEM): because of a use...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: No maintainer - Look at https://wiki.gentoo.org/wiki/Project:Proxy_Maintainers if you want to take care of it
URL:
Whiteboard:
Keywords: PATCH, TESTFAILURE
Depends on:
Blocks:
 
Reported: 2023-09-14 07:29 UTC by Agostino Sarubbo
Modified: 2023-12-20 10:36 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments
build.log (build.log,109.54 KB, text/plain)
2023-09-14 07:29 UTC, Agostino Sarubbo
Details
1-test-suite.log (1-test-suite.log,3.60 KB, text/plain)
2023-09-14 07:29 UTC, Agostino Sarubbo
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Agostino Sarubbo gentoo-dev 2023-09-14 07:29:31 UTC
https://blogs.gentoo.org/ago/2020/07/04/gentoo-tinderbox/

Issue: app-crypt/mhash-0.9.9.9-r3 fails tests (PYTHON-3.12-SYSTEM).
Discovered on: amd64 (internal ref: python-3.12_tinderbox)

NOTE:
(PYTHON-3.12-SYSTEM) in the summary means that the bug was found on a machine that runs python-3.12 but this bug MAY or MAY NOT BE related to the new python version
Comment 1 Agostino Sarubbo gentoo-dev 2023-09-14 07:29:33 UTC
Created attachment 870552 [details]
build.log

build log and emerge --info
Comment 2 Agostino Sarubbo gentoo-dev 2023-09-14 07:29:34 UTC
Created attachment 870553 [details]
1-test-suite.log

1-test-suite.log
Comment 3 Agostino Sarubbo gentoo-dev 2023-09-14 07:30:46 UTC
I will report the issue upstream and then link it here.
Comment 5 Larry the Git Cow gentoo-dev 2023-12-20 10:36:08 UTC
The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=62b38c216dc300d3300f24a19d8de5ff6fc644bb

commit 62b38c216dc300d3300f24a19d8de5ff6fc644bb
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2023-12-20 10:34:22 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2023-12-20 10:35:08 +0000

    app-crypt/mhash: fix UAF in tests
    
    Closes: https://bugs.gentoo.org/914173
    Signed-off-by: Sam James <sam@gentoo.org>

 .../mhash/files/mhash-0.9.9.9-hmac-uaf-test.patch     | 19 +++++++++++++++++++
 app-crypt/mhash/mhash-0.9.9.9-r3.ebuild               |  1 +
 2 files changed, 20 insertions(+)