[GRASS-dev] Fwd: Buffer overflow GRASS GIS 6.3.0

Jáchym Čepický jachym at les-ejk.cz
Fri Nov 14 08:48:15 EST 2008


Hi,

2008/11/14 Ulrich Leopold <Ulrich.Leopold at tudor.lu>:
> Hi Jachym,
>
> is it possible to include grass version 6.4 in the Ubuntu 8.10
> (intrepid) repositories? Or at least the grass-6.4.0-dev packages as it
> seems the fix will not find its way into version 6.3 so quickly?
>
> Or is 6.4 too unstable at the moment for production?

6.4 is not stable yet (but shall be stable sooon) and it makes no
sense to prepare packages from development snapshots.

anyway: it works! I applied the patch to grass 6.3 and it works like a
charm. I prepared fresh packages, but the upload will take time (slow
connection here), so be patient

thanks a lot, glynn!

jachym

>
> Thx,
> Ulrich
>
> On Fri, 2008-11-14 at 13:45 +0100, Jáchym Čepický wrote:
>> thanks, glynn, I'll give it a try!
>>
>> jachym
>>
>> 2008/11/14 Glynn Clements <glynn at gclements.plus.com>:
>> >
>> > Jáchym Čepický wrote:
>> >
>> >> I already reported problem with g.parsr in GRASS 6.3 on Ubuntu 8.10
>> >>
>> >> here is another message, maybe it could help (?)
>> >
>> > I believe that this has been fixed by r34172 (7.0) and r34173 (6.4),
>> > with the following change:
>> >
>> > --- general/g.parser/main.c     (revision 34171)
>> > +++ general/g.parser/main.c     (revision 34172)
>> > @@ -358,7 +358,7 @@
>> >      * to uppercase it was necessary to use uppercase variables.
>> >      * Set both until all scripts are updated */
>> >     for (flag = ctx.first_flag; flag; flag = flag->next_flag) {
>> > -       char buff[12];
>> > +       char buff[16];
>> >
>> >        sprintf(buff, "GIS_FLAG_%c=%d", flag->key, flag->answer ? 1 : 0);
>> >        putenv(G_store(buff));
>> >
>> > --
>> > Glynn Clements <glynn at gclements.plus.com>
>> >
>>
>>
>>
> --
> ______________________________________________________________________
>
> Ulrich Leopold
>
> Resource Centre for Environmental Technologies, Public Research Centre
> Henri Tudor, Technoport Schlassgoart, 66 rue de Luxembourg, P.O. BOX
> 144, L-4002 Esch-sur-Alzette, Luxembourg
>
> tel: +352 425991 618
> fax: +352 425991 601
> mobile: +352 691 304813
> http://www.crte.lu
>
>
> Computational Bio- and Physical Geography, Institute for Biodiversity
> and Ecosystem Dynamics, University of Amsterdam, Nieuwe Achtergracht
> 166, NL-1018WV Amsterdam, The Netherlands
>
> http://www.science.uva.nl/ibed
>
>



-- 
Jachym Cepicky
e-mail: jachym.cepicky gmail com
URL: http://les-ejk.cz
GPG: http://www.les-ejk.cz/pgp/jachym_cepicky-gpg.pub


More information about the grass-dev mailing list