Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 933427 - dev-db/libdbi-drivers-0.9.0-r2: needs patches for memory corruption affecting app-office/gnucash[sqlite]
Summary: dev-db/libdbi-drivers-0.9.0-r2: needs patches for memory corruption affecting...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Robin Johnson
URL:
Whiteboard:
Keywords: PATCH
Depends on:
Blocks:
 
Reported: 2024-06-02 15:21 UTC by Maciej S. Szmigiero
Modified: 2024-06-12 02:01 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Maciej S. Szmigiero 2024-06-02 15:21:19 UTC
When opening a sqlite3 file in GnuCash it crashes with an apparent buffer overflow:
> *** buffer overflow detected ***: terminated

That's actually a dev-db/libdbi-drivers-0.9.0-r2 bug, which was fixed upstream more than 10 years ago [1].

Please include this patch and a second upstream memory corruption fix for the sqlite3 driver [2] in the dev-db/libdbi-drivers-0.9.0 package so GnuCash will no longer crash when opening sqlite3 files.

Thanks.



[1]: https://sourceforge.net/p/libdbi-drivers/libdbi-drivers/ci/24f48b86c8988ee3aaebc5f303d71e9d789f77b6/
[2]: https://sourceforge.net/p/libdbi-drivers/libdbi-drivers/ci/7657c4c688c021d5f42a38e998c876d1739d5d8f/
Comment 1 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2024-06-11 17:31:45 UTC
I'll take a look.
Comment 2 Larry the Git Cow gentoo-dev 2024-06-12 02:01:11 UTC
The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=1c52fc05c6b46b242e64eb746af429892b986d0a

commit 1c52fc05c6b46b242e64eb746af429892b986d0a
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2024-06-12 01:57:18 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2024-06-12 01:57:18 +0000

    dev-db/libdbi-drivers: fix memory corruption issues w/ sqlite
    
    Backport some memory corruption fixes for sqlite3.
    
    Note that I haven't fixed bug #920440 - I have essentially no idea
    about this package and I'd really prefer someone investigate what
    it's even trying to do there.
    
    Bug: https://bugs.gentoo.org/920440
    Closes: https://bugs.gentoo.org/920460
    Closes: https://bugs.gentoo.org/933427
    Signed-off-by: Sam James <sam@gentoo.org>

 ...bdbi-drivers-0.9.0-buffer-overflow-sqlite.patch | 14 ++++
 .../files/libdbi-drivers-0.9.0-c99.patch           | 11 +++
 ...ibdbi-drivers-0.9.0-fortify-source-sqlite.patch | 13 ++++
 .../libdbi-drivers/libdbi-drivers-0.9.0-r3.ebuild  | 90 ++++++++++++++++++++++
 4 files changed, 128 insertions(+)