Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 320253 - net-libs/libwww's md5 module breaks on 64-bit through improper types use
Summary: net-libs/libwww's md5 module breaks on 64-bit through improper types use
Status: RESOLVED WONTFIX
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: AMD64 Linux
: High normal (vote)
Assignee: No maintainer - Look at https://wiki.gentoo.org/wiki/Project:Proxy_Maintainers if you want to take care of it
URL:
Whiteboard:
Keywords:
Depends on: 409545 409549 409551 435196 435200
Blocks:
  Show dependency tree
 
Reported: 2010-05-17 19:18 UTC by Matthias Andree
Modified: 2012-11-18 13:55 UTC (History)
3 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Matthias Andree 2010-05-17 19:18:35 UTC
+++ This bug was initially created as a clone of Bug #319283 +++

Analysis of Bug #319283 reveals that:

- libwww installs a libmd5.so and .a that contain an RSA based MD5 implementation.

- this MD5 implementation (in modules/md5/ in the source tarball) uses "long" for UINT4 in places where it clearly needs 32-bit unsigned integers, but it gets 64-bit integers. The code should be using uint32_t instead.

- libwww does NOT install an md5 header file

- applications linking against libmd5 fail to operate properly (and obtain fals MD5 checksums) on platforms where long isn't 32 bits.
Comment 1 Pacho Ramos gentoo-dev 2012-03-18 17:23:33 UTC
A patch or fix for that would be really appreciated now that this package is orphan :/
Comment 2 Pacho Ramos gentoo-dev 2012-03-18 17:25:27 UTC
I have just seen this is only an optional dependency of a few packages... maybe we should consider their removal since upstream doesn't maintain it for ages and has some opened bugs :-/
Comment 3 Michael Palimaka (kensington) gentoo-dev 2012-10-17 05:17:39 UTC
All ebuilds with this as a dependency has been dropped, so we can go ahead with treecleaning.
Comment 4 Michael Palimaka (kensington) gentoo-dev 2012-11-18 13:55:54 UTC
This package is now removed from the tree.