zipnote: Segfault during write operation

Santiago Vila — Tue, 22 Apr 2025 22:29:27 -0000

Hello. This is Debian Bug #952509 and this is the full URL for the bug:

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=952509

Follows a summary of the bug.

(Note: I'm also attaching the reconstructed "crash00.zip" file which was provided later in the Debian bug)

koala writes:

A segfault during the write operation with zipnote version 3.0

How to reproduce the bug :

1 - zipnote crash00.zip > note

2 - zipnote -w crash00.zip < note

The execution trace show a memcpy with the wrong size :

######################################

free(0x559aff234480)                                                                                            = <void>

free(0x559aff2343a0)                                                                                            = <void>

fclose(0x559aff234150)                                                                                          = 0

ftello64(0x559aff233280, 1, 0, 0x559aff233010)                                                                  = 124

malloc(1)                                                                                                       = 0x559aff234480

memcpy(0x559aff234480, "", 0)                                                                                   = 0x559aff234480

memcpy(0x559aff234480, "mples/UT\005\0\177\0\0\0\0\0\0\0\0\0\0\301\0\0\0\0\0\0\0\036\003\n"..., 18446744073709551605 <no return ...>

--- SIGSEGV (Segmentation fault) ---

Recent changes to 77: zipnote: Segfault during write operation

zipnote: Segfault during write operation