Version in base suite: 6.2.0-1 Base version: cryptmount_6.2.0-1 Target version: cryptmount_6.2.0-1+deb12u1 Base file: /srv/ftp-master.debian.org/ftp/pool/main/c/cryptmount/cryptmount_6.2.0-1.dsc Target file: /srv/ftp-master.debian.org/policy/pool/main/c/cryptmount/cryptmount_6.2.0-1+deb12u1.dsc changelog | 8 ++++++++ patches/getopt-initialization.patch | 14 ++++++++++++++ patches/series | 1 + watch | 2 +- 4 files changed, 24 insertions(+), 1 deletion(-) diff -Nru cryptmount-6.2.0/debian/changelog cryptmount-6.2.0/debian/changelog --- cryptmount-6.2.0/debian/changelog 2023-01-07 16:30:00.000000000 +0000 +++ cryptmount-6.2.0/debian/changelog 2023-07-15 09:41:30.000000000 +0000 @@ -1,3 +1,11 @@ +cryptmount (6.2.0-1+deb12u1) bookworm; urgency=low + + * Fix for memory-initialization in command-line parser (bug#1038384) + - one-line change to source-code, replacing malloc() with calloc() + - reduces risk of SEGV crashes when handling unrecognized command-line options + + -- RW Penney Sat, 15 Jul 2023 10:30:00 +0000 + cryptmount (6.2.0-1) unstable; urgency=low * New upstream release diff -Nru cryptmount-6.2.0/debian/patches/getopt-initialization.patch cryptmount-6.2.0/debian/patches/getopt-initialization.patch --- cryptmount-6.2.0/debian/patches/getopt-initialization.patch 1970-01-01 00:00:00.000000000 +0000 +++ cryptmount-6.2.0/debian/patches/getopt-initialization.patch 2023-07-01 07:05:21.000000000 +0000 @@ -0,0 +1,14 @@ +Description: Fix memory initialization error in command-line parser +Author: RW Penney +Forwarded: not-needed +--- a/cryptmount.c ++++ b/cryptmount.c +@@ -1372,7 +1372,7 @@ + #ifdef _GNU_SOURCE + struct option *longopts; + +- longopts = (struct option*)malloc((n_options + 1) * sizeof(struct option)); ++ longopts = (struct option*)calloc(n_options + 1, sizeof(struct option)); + for (i=0; i