[gentoo-dev] gaim-0.75-r5 stable push

[gentoo-dev] gaim-0.75-r5 stable push

[Don Seiler]

[-- Attachment #1: Type: text/plain, Size: 695 bytes --]

In going over the gaim tree, the stable versions for various platforms
are all over the board, and in some cases incredibly out of date.

So I want to start an initiative to get gaim-0.75-r5 marked into stable.
Could all arch leads take appropriate actions?  I've personally tested
on x86 and ppc and it works fine.  gaim-0.75-r5 actually includes a
patch from ppc kernel god benh to get things working on big-endian
systems.

There is still a bug that prevents Yahoo! authentication from working on
big-endian systems.  However Yahoo! authentication will have no chance
of working on previous versions of gaim anymore anyway, so I don't think
this should prevent a stable mark right now.

Don.

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-dev] gaim-0.75-r5 stable push

[Jason Wever]

[-- Attachment #1: Type: text/plain, Size: 467 bytes --]

On Sat, 17 Jan 2004 22:35:11 -0600
Don Seiler <rizzo@gentoo.org> wrote:

> There is still a bug that prevents Yahoo! authentication from working on
> big-endian systems.  However Yahoo! authentication will have no chance
> of working on previous versions of gaim anymore anyway, so I don't think
> this should prevent a stable mark right now.

Can you elaborate on this?  I can log into a Yahoo! IM account fine on
sparc64.

-- 
Jason Wever
Gentoo/Sparc Co-Team Lead

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-dev] gaim-0.75-r5 stable push

[Tom Wesley]

[-- Attachment #1: Type: text/plain, Size: 586 bytes --]

On Sun, 2004-01-18 at 15:54, Jason Wever wrote:
> On Sat, 17 Jan 2004 22:35:11 -0600
> Don Seiler <rizzo@gentoo.org> wrote:
> 
> > There is still a bug that prevents Yahoo! authentication from working on
> > big-endian systems.  However Yahoo! authentication will have no chance
> > of working on previous versions of gaim anymore anyway, so I don't think
> > this should prevent a stable mark right now.
> 
> Can you elaborate on this?  I can log into a Yahoo! IM account fine on
> sparc64.

And I can't login with .75 where I could with .74.... (~x86)

-- 
Tom Wesley

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-dev] gaim-0.75-r5 stable push

[Don Seiler]

[-- Attachment #1: Type: text/plain, Size: 1106 bytes --]

Tom can you please open a bug on this at http://bugs.gentoo.org.  No
need to spam the list with details at this moment.  Assign it to
gaim-bugs@gentoo.org.

Be sure to include output from 'emerge info' so I can get some basic
system info off the bat.

Thanks,
Don.

On Sun, Jan 18, 2004 at 05:03:22PM +0000, Tom Wesley wrote:
> On Sun, 2004-01-18 at 15:54, Jason Wever wrote:
> > On Sat, 17 Jan 2004 22:35:11 -0600
> > Don Seiler <rizzo@gentoo.org> wrote:
> > 
> > > There is still a bug that prevents Yahoo! authentication from working on
> > > big-endian systems.  However Yahoo! authentication will have no chance
> > > of working on previous versions of gaim anymore anyway, so I don't think
> > > this should prevent a stable mark right now.
> > 
> > Can you elaborate on this?  I can log into a Yahoo! IM account fine on
> > sparc64.
> 
> And I can't login with .75 where I could with .74.... (~x86)
> 
> -- 
> Tom Wesley



-- 
"Uh, I support winning."

George W. Bush
April 7, 1999
Spoken on CNN's Inside Politics.  Referring to America's involvement in Kosovo.

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-dev] gaim-0.75-r5 stable push

[Don Seiler]

[-- Attachment #1: Type: text/plain, Size: 1037 bytes --]

I was told by the gaim developers that the bug hits big-endian systems
"harder" than x86 systems.

So this doesn't mean that all big-endian systems WILL fail, so my
absolute working earlier was incorrect.

And a huzzah for sparc64.

Don.

On Sun, Jan 18, 2004 at 10:54:47AM -0500, Jason Wever wrote:
> On Sat, 17 Jan 2004 22:35:11 -0600
> Don Seiler <rizzo@gentoo.org> wrote:
> 
> > There is still a bug that prevents Yahoo! authentication from working on
> > big-endian systems.  However Yahoo! authentication will have no chance
> > of working on previous versions of gaim anymore anyway, so I don't think
> > this should prevent a stable mark right now.
> 
> Can you elaborate on this?  I can log into a Yahoo! IM account fine on
> sparc64.
> 
> -- 
> Jason Wever
> Gentoo/Sparc Co-Team Lead



-- 
"The federal government ought to have maximum flexibility."

George W. Bush
September 30, 2000
The presidential candidate was referring to "states" having flexibility in
their use of education funds.

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-dev] gaim-0.75-r5 stable push

[Kumba]

Don Seiler wrote:

> I was told by the gaim developers that the bug hits big-endian systems
> "harder" than x86 systems.
> 
> So this doesn't mean that all big-endian systems WILL fail, so my
> absolute working earlier was incorrect.
> 
> And a huzzah for sparc64.
> 
> Don.

I've had reports of it locking up an Indy when logging into Yahoo.  SGI 
mips machines are big-endian, btw.

I also found this bug, and I wonder if the two are connected:

Bugzilla Bug 37919
net-im/gaim-0.75-r1 reports stack smashing attack when connecting to Yahoo

Maybe what we are seeing is a stack-smash attack taking out big-endian 
machines? (well, most anyways).


--Kumba

-- 
"Such is oft the course of deeds that move the wheels of the world: 
small hands do them because they must, while the eyes of the great are 
elsewhere."  --Elrond


--
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] gaim-0.75-r5 stable push

[Don Seiler]

[-- Attachment #1: Type: text/plain, Size: 1052 bytes --]

This is out of my already limited area of knowledge.

I'll need someone with some hardened expertise to tell me if this is
indeed an attack or exploit and something that we need to notify
upstream.

Don.

On Sun, Jan 18, 2004 at 03:25:52PM -0500, Kumba wrote:
> 
> I've had reports of it locking up an Indy when logging into Yahoo.  SGI 
> mips machines are big-endian, btw.
> 
> I also found this bug, and I wonder if the two are connected:
> 
> Bugzilla Bug 37919
> net-im/gaim-0.75-r1 reports stack smashing attack when connecting to Yahoo
> 
> Maybe what we are seeing is a stack-smash attack taking out big-endian 
> machines? (well, most anyways).
> 
> 
> --Kumba
> 
> -- 
> "Such is oft the course of deeds that move the wheels of the world: 
> small hands do them because they must, while the eyes of the great are 
> elsewhere."  --Elrond
> 
> 
> --
> gentoo-dev@gentoo.org mailing list
> 
> 

-- 
"Illegitimacy is something we should talk about in terms of not having it."

George W. Bush
May 20, 1996

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-dev] gaim-0.75-r5 stable push

[Matthew Kennedy]

[...]

>> 
>> Maybe what we are seeing is a stack-smash attack taking out big-endian 
>> machines? (well, most anyways).

Could you post the exact code in question?  I am familiar with both
the yahoo code base in Gaim and the code base of libyahoo2
(similar/based on to Gaim's).

The last time I saw an endian problem was in libyahoo2.  I don't know
if they have fixed it, but the Gaim folks had fixed the same error in
theirs at that point in time.

Matt
-- 
Matthew Kennedy
Gentoo Linux Developer


--
gentoo-dev@gentoo.org mailing list