Bug#1116557: [PATCH] Fix cuetools buffer overflow bug

Path	csiph.com!pasdenom.info!weretis.net!feeder8.news.weretis.net!srl.newsdeef.eu!news.corradoroberto.it!gothmog.csi.it!bofh.it!news.nic.it!robomod
From	"Xi Rui" <octane@bupt.edu.cn>
Newsgroups	linux.debian.bugs.dist
Subject	Bug#1116557: [PATCH] Fix cuetools buffer overflow bug
Date	Mon, 29 Sep 2025 13:00:01 +0200
Message-ID	<LAjLP-1rLP-1@gated-at.bofh.it> (permalink)
References	<LA1vz-1fwq-11@gated-at.bofh.it>
X-Mailbox-Line	From debian-bugs-dist-request@lists.debian.org Mon Sep 29 10:53:10 2025
Old-Return-Path	<debbugs@buxtehude.debian.org>
X-Spam-Flag	NO
X-Spam-Score	-1.897
Reply-To	"Xi Rui" <octane@bupt.edu.cn>, 1116557@bugs.debian.org
Resent-To	debian-bugs-dist@lists.debian.org
Resent-Cc	culu.gyx@gmail.com
X-Debian-Pr-Message	followup 1116557
X-Debian-Pr-Package	cuetools
X-Debian-Pr-Source	cuetools
Ex-Qq-Recipientcnt	1
X-Qq-Goodbg	2
X-Qq-Ssf	0040000000000050
X-Qq-Xmrinfo	OD9hHCdaPRBwq3WW+NvGbIU=
X-Qq-Feat	D4aqtcRDiqSXUD1VIm19gsdu+Z32B2o0a6OujB1TM58=
X-Qq-Business-Origin	2
X-Qq-Originating-IP	JQvSzpZJvCyHFzkR03R+gPd1NNaDAI43LwPUC/3IfNo=
X-Originating-IP	114.253.33.76
X-Qq-Mid	lv4gz5a-0t1759142621t42a2bd93
MIME-Version	1.0
Content-Type	multipart/mixed; boundary="----=_NextPart_68DA62DC_567EAF40_1D6ACA1A"
Content-Transfer-Encoding	8Bit
X-Qq-MIME	TCMime 1.0 by Tencent
X-Mailer	QQMail 2.x
X-Qq-Mailer	QQMail 2.x
X-Bizmail-ID	5609339926115184330
X-Qq-Sendsize	520
Feedback-ID	lv:bupt.edu.cn:qybglogicsvrgz:qybglogicsvrgz8a-1
X-Qq-Xmailinfo	MKeCOnnpUoskxon9sH0s2eCSUFU676zqw6ic9nQMYT6qiDxOfTHyElI3 BgSCL2D/XmacUCPjDM9tynnxZZHCks3V+hj5+wczC0j6J60XDFWAOJrcvea6GCBMgqqkf8a uGw3wlR6MDhgy5uJCDaaMJt77z/3HkPnLPWgUQDuGU1sj0uxU/71GR+ZGwL6uMW17A8Esfa R9b659y4fIATYt9uTOrJakUbGj0u77Zm2W5jcnvfi8m86BWywYuzjj4wYNvbnbS8JhTy/jV IL5WdKB1+UUKH5G5uRD753Y/7KtZD5HNXm9Swksxj9iiJfPKWBopStXTeh4stGoHXg+UM1L 3O3rKp7v4vB4LELJzQ+34Zwtx2TOYwqSpnee9bIMnLAJ+ilv4zmHEiPND3Sn/+Nk4e76CiF vas+u5YubSbK0aM4F03LD+hmH6BY9CbgjAcHVW9J+pEl6XSRGYe/U41efZ3jMX4QC8+5Pke 72YNcTaqGi9f7hcL0HCPIF3s2gkDVrYt+7HwiF1bRSKLPEGAN49qw+/ettcTlQWdpkSvIBv lNQLepN4CrvB8T+POppg8ZUGyDUxPTcMnDUu+GCopmra5HA7cEZSm9MJ1CUV/SdDdpVI9nD kFY9DD50Cncoovgc06qEugPj+6pR666RLOE/7maV0oBxEZyQOD//Zw0QxUQGbfcvoNLvzSA fiwFeN2QBsdZdfHCMmjJ1mmdD371QPIK02wA80xyQ0sH4IZ28RYROi9Le4vfeWyrw22721U GUAbm+GSouBjaYTbH6Z3Cdx5kiIhkh2Mq76ylCgv8fXWSNiu1ivd1O8gTkEzGVOuBF5b8F7 dKfSrr8uAavGHcfUXMBCCH/r/YdLIKNPaSvNcWLawogMFqhcIjP6neZIIqnCOTn7Rd0gRDn 5CNcRFFyCMVY21R/PQoUm7v//AiBJSoGoW6ZtDw84rGWKqvC5yCP8egmZMNpnkL34KTzmNa bHxLIdn73kQRAJrooZtbAsIAt/hmUDRnbsXQKQO9s5tyXwxCXudRqSlzRZgoFz5TJAcskAG O5i3LLOCkTuMw3iwCTeIC+okuD9m8=
X-Greylist	delayed 446 seconds by postgrey-1.37 at buxtehude; Mon, 29 Sep 2025 10:51:31 UTC
X-Debian-Message	from BTS
X-Mailing-List	<debian-bugs-dist@lists.debian.org> archive/latest/1928251
List-ID	<debian-bugs-dist.lists.debian.org>
List-URL	<https://lists.debian.org/debian-bugs-dist/>
Approved	robomod@news.nic.it
Lines	43
Organization	linux.* mail to news gateway
Sender	robomod@news.nic.it
X-Original-Date	Mon, 29 Sep 2025 18:43:40 +0800
X-Original-Message-ID	<tencent_6509DBEB1988ED2C5B485A87@qq.com>
X-Original-References	<D010705785734FD3+175907236308.139843.1964413466980789509.reportbug@OctaneLab>
Xref	csiph.com linux.debian.bugs.dist:1263789

Show key headers only | View raw

[Multipart message — attachments visible in raw view] - view raw

Hello,

I've created a commit to fix this issue. Git patch file is sent as the attachment. Also opened a pr in upstream repository: https://github.com/svend/cuetools/pull/44

Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Find similar

Thread

Bug#1116557: cuetools: Buffer overflow in time.c time_frame_to_mmssff Xi Rui <Octane@bupt.edu.cn> - 2025-09-28 17:30 +0200
  Bug#1116557: [PATCH] Fix cuetools buffer overflow bug "Xi Rui" <octane@bupt.edu.cn> - 2025-09-29 13:00 +0200

csiph-web