lp://qastaging/~gandelman-a/ubuntu/quantal/liblockfile/lp941968

Branch merges

Propose for merging

No branches dependent on this one.

Merged into lp://qastaging/ubuntu/quantal/liblockfile

James Page: Approve on 2013-07-02

Ubuntu branches: Pending requested 2013-06-24

Diff: 790 lines (+686/-10)

6 files modified

.pc/applied-patches (+1/-0)
.pc/fix-buffer-overflows.patch/lockfile.c (+542/-0)
debian/changelog (+9/-0)
debian/patches/fix-buffer-overflows.patch (+113/-0)
debian/patches/series (+1/-0)
lockfile.c (+20/-10)

api

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Bug #941968: lockfile-create hangs inside lxc containers (potential buffer overflow?)	Undecided	Won't Fix
Bug #1011477: [SRU] liblockfile buffer overflow with high pid numbers	Undecided	Won't Fix

Link a bug report

Related blueprints

10. By Adam Gandelman on 2013-06-24

* debian/patches/fix-buffer-overflows.patch: Fix buffer overflows when
  building strings
  - Protect against overflows caused by long hostnames (LP: #941968)
  - Protect against overflows caused by large PID numbers (LP: #1011477)

9. By Anibal Monsalve Salazar on 2012-06-13

* Multiarch issues
  - Move liblockfile.a to /usr/lib/$(DEB_HOST_MULTIARCH)
  - Compress files with "gzip -n"
  Patch by Sven Joachim
  Closes: #637569
* Enable hardened build flags
  Add Makefile.in.patch
* Standards version is 3.9.3

8. By Miquel van Smoorenburg <email address hidden> on 2011-08-13

* add Replaces/Breaks liblockfile1 for liblockfile-bin (closes: #637555)
* make liblockfile-bin Multiarch: foreign (closes: #637568)

7. By Miquel van Smoorenburg <email address hidden> on 2011-08-12

* fix debian/files botchup (fixes: #637465)
* fix more lintian warnings and errors

6. By Miquel van Smoorenburg <email address hidden> on 2011-08-10

* New upstream version (fixes: #406471, #547721, #273112)
* Make package multi-arch compliant
* Add lintian override for setgid mail helper
* Delete whitespace adjusting macro stuff from dotlockfile.1
* Remove shlib depends from dotlockfile control file entry

5. By Anibal Monsalve Salazar on 2010-02-14

* Merge 1.08-3ubuntu1
  Compute md5sums during build
  Closes: 563544, 564797
* Debian source format is 3.0 (quilt)
  Add 04-505851-remove-debug-code.patch
* Add important information to dotlockfile.1
  Add 06-493462-dotlockfile.1.patch
  Update usage message
  Add 07-493462-dotlockfile.c.patch
  Patches by Roland Eggner
  Closes: 493462
* Make ar overwritable (for cross-builds)
  Add 09-562937-make-ar-overwrittable.patch
  Patch by Marc Kleine-Budde and Wolfram Sang
  Closes: 562937
* Fix out-of-date-standards-version
  Add 02-COPYRIGHT.patch
* Fix copyright-refers-to-symlink-license
* Fix maintainer-script-without-set-e

4. By Anibal Monsalve Salazar on 2008-11-18

* Don't stale lockfiles after 10 seconds instead of 5 minutes;
  patch by Wolfram Sang; closes: #505851
* Handle nostrip build option; patch by Justin Pryzby; closes: #437374
* debian/rules: Don't ignore error status of rm -fr; patch by Justin Pryzby
* debian/rules: Remove stampfiles first; patch by Justin Pryzby

3. By Joey Hess <email address hidden> on 2006-01-10

* Non-maintainer upload.
* Remove postinst and prerm scripts, completing the /usr/doc tarnsition.
  Closes: #322790

2. By Miquel van Smoorenburg <email address hidden> on 2004-06-04

* Fix manpage - fd = open("/var/mail/USER.lock") should be
  fd = open("/var/mail/USER");
* Remove extraneous free() from lockfile.c (closes: #217740)
* If the existing lockfile is not valid, the first try isn't really
  valid either - in that case, even if we want to try locking just
  once, try once more. (closes: #217741)

1. By Miquel van Smoorenburg <email address hidden> on 2001-04-06

* Some more manpage updates
* Set priority for liblockfile1 to "important" (closes: #92551)