Bug 141116

Summary:	gnome-moz-remote "buffer overflow detected"
Product:	[openSUSE] SUSE LINUX 10.0	Reporter:	Jon Nelson <jnelson-suse>
Component:	GNOME	Assignee:	Stanislav Brabec <sbrabec>
Status:	RESOLVED FIXED	QA Contact:	E-mail List <qa-bugs>
Severity:	Normal
Priority:	P5 - None	CC:	security-team
Version:	Final
Target Milestone:	---
Hardware:	Other
OS:	Other
Whiteboard:
Found By:	Other	Services Priority:
Business Priority:		Blocker:	---
Marketing QA Status:	---	IT Deployment:	---

Description Jon Nelson 2005-12-30 04:35:51 UTC

jnelson@note:~> gnome-moz-remote --help
Usage: gnome-moz-remote [OPTION...]

GNOME options
  --disable-sound            Disable sound server usage
  --enable-sound             Enable sound server usage
*** buffer overflow detected ***: gnome-moz-remote terminated
  --espeaker=HOSTNAME:PORT   Aborted
jnelson@note:~> which gnome-moz-remote
/opt/gnome/bin/gnome-moz-remote
jnelson@note:~> rpm -qf /opt/gnome/bin/gnome-moz-remote
gnome-libs-1.4.1.7-690
jnelson@note:~>

Comment 1 Stanislav Brabec 2006-01-05 15:43:27 UTC

Bug in library:

gnome_segv --help
Použití: gnome_segv [VOLBY...]

Volby GNOME
  --disable-sound               Zakáže použití zvukového serveru
  --enable-sound                Povolí použití zvukového serveru
*** buffer overflow detected ***: gnome_segv terminated
  --espeaker=POČÍTAČ:PORT    Neúspěšně ukončen (SIGABRT)

Comment 2 Stanislav Brabec 2006-02-07 13:27:17 UTC

gnome-libs has its own popt - it is a version from about 1998. It fails on popthelp.c:

sprintf(format, "%%.%ds\n%%%ds", (int) (ch - help), indentLength);

Replacing with system popt fixes this problem.

Comment 3 Stanislav Brabec 2006-02-07 13:48:33 UTC

Patched to use system popt.