Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 478216

Summary: dev-tcltk/tcllib-1.15-r1 fails test multiplexer-5.2
Product: Gentoo Linux Reporter: Markus Walter <gentoo>
Component: [OLD] LibraryAssignee: TCL/TK Project <tcltk>
Status: RESOLVED FIXED    
Severity: normal    
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard:
Package list:
Runtime testing required: ---
Attachments: build log (bzipped)
emerge --info

Description Markus Walter 2013-07-26 08:49:52 UTC
Created attachment 354232 [details]
build log (bzipped)

On my hardened ~amd64 machine with gcc-4.8.1 I see the following test failure for tcllib.

---- multiplexer-5.2 start


==== multiplexer-5.2 add access filter which denies access FAILED
==== Contents of test case:

    set ::forever {}
    set mp [multiplexer::create]
    ${mp}::Init 37465
    ${mp}::AddAccessFilter DenyAccessFilter
    set sk1 [socket localhost 37465]
    set sk2 [socket localhost 37465]
    update
    fconfigure $sk1 -buffering none
    if { [catch {
	puts $sk1 "boom"
    } err] } {
	set result "socket blocked"
    } else {
	set result "socket not blocked"
    }
    ${mp}::destroy
    set result

---- Result was:
socket not blocked
---- Result should have been (exact matching):
socket blocked
==== multiplexer-5.2 FAILED
Comment 1 Markus Walter 2013-07-26 08:51:40 UTC
Created attachment 354234 [details]
emerge --info
Comment 2 Justin Lecher (RETIRED) gentoo-dev 2015-03-03 14:00:43 UTC
+*tcllib-1.15-r2 (03 Mar 2015)
+
+  03 Mar 2015; Justin Lecher <jlec@gentoo.org>
+  +files/tcllib-1.15-XSS-vuln.patch, +files/tcllib-1.15-test.patch,
+  +files/tcllib-1.16-XSS-vuln.patch, +files/tcllib-1.16-test.patch,
+  +tcllib-1.15-r2.ebuild, +tcllib-1.16.ebuild:
+  Version Bump, #531864; fix testfailure, #478216; backport security fix,
+  #541912
+