helpGNU Serveez - Support: sr #110182, unsigned content-length needs...

 
 

sr #110182: unsigned content-length needs testing

Submitted by:  Thien-Thi Nguyen <ttn>
Submitted on:  Fri 24 Jan 2020 12:58:49 PM UTC  
 
Category:  None Priority:  5 - Normal
Severity:  5 - Blocker Status:  Ready For Test
Privacy:  Public Assigned to:  Thien-Thi Nguyen <ttn>
Open/Closed:  Open Operating System:  Mac OS

Add a New Comment (Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Sat 01 Feb 2020 06:56:41 AM UTC, comment #1: 

According to https://savannah.nongnu.org/task/?15530 I believe Guile-BAUX is now approved.  Hopefully it will be available for "git clone" RSN...

Thien-Thi Nguyen <ttn>
Project AdministratorIn charge of this item.
Fri 24 Jan 2020 12:58:49 PM UTC, original submission:  

The recent (late 2019) change to the type of a content-length variable from int to size_t deserves some attention now that i (the Serveez maintainer) am regaining access and momentum to the project.

Thanks go to Austin James Gadient and Raimund Jacob for the work thus far.  Looking ahead, there are three points to consider.

First off, there were some additional, follow-on, changes required: (a) do_write is now also size_t; (b) the printf format used for output is now %zu.

Secondly, the lack of public Guile-BAUX is in the process of being resolved (https://savannah.gnu.org/task/?15530).  Hopefully w/in the next week or so anyone will be able to bootstrap Serveez using Guile-BAUX and the usual set of Autotools, and hack on it more easily.

Lastly, once the Guile-BAUX repo is public, the above changes should be tested in the environment where the bug was found (Mac OSX) before we cut a new release.  Because there is a CVE related to this, i've set the severity to Blocker.  I encourage Austin James Gadient to obtain a Savannah account so that we can discuss what is necessary to roll an interim release for his evaluation.

Feel free to monitor this channel as well as the repo (branch 'next') for updates.  (E.g., i will post as soon as i find out Guile-BAUX is public.)

Thien-Thi Nguyen <ttn>
Project AdministratorIn charge of this item.

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by ttn (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

     

     

    No changes have been made to this item

    Back to the top


    Powered by Savane 3.5