[egenix-users] bufferoverflow in egenix?

[M.-A. Lemburg]

Klavs Klavsen wrote:
> Hi guys,
> 
> Just installed a new gcc with stack-smashing protection - and while
> recompiling modules with stack-smashing protection, I got this message:
> --
> copying build/lib.linux-i686-2.3/mx/Misc/__init__.py ->
> /var/tmp/portage/egenix-mx-base-2.0.5/image/usr/l
> ib/python2.3/site-packages/mx/Misc
> copying build/lib.linux-i686-2.3/mx/Misc/Cache.py ->
> /var/tmp/portage/egenix-mx-base-2.0.5/image/usr/lib/
> python2.3/site-packages/mx/Misc
> writing byte-compilation script
> '/var/tmp/portage/egenix-mx-base-2.0.5/temp/tmpTQ2rvx.py'
> /usr/bin/python -O /var/tmp/portage/egenix-mx-base-2.0.5/temp/tmpTQ2rvx.py
> usr/lib/python2.3/site-packages/mx/TextTools/Examples/pytag.py:47:
> SyntaxWarning: name 'debugging' is use
> d prior to global declaration

This is an error that the Python compiler generated.
I'd suggest you report to the Python bug tracker.

BTW, pytag.py is no longer used or maintained, so you can
safely delete it.

> python: stack smashing attack in function symtable_node()
> error: command '/usr/bin/python' terminated by signal 6
> 
> !!! ERROR: dev-python/egenix-mx-base-2.0.5 failed.
> !!! Function distutils_src_install, Line 43, Exitcode 1
> !!! (no error message)
> 
> so it seems egenix-mx-base causes a bufferoverflow (or perhaps it causes
> one in python) - I haven't done very much research as I can live without
> egenix - but just wanted to let you know :)
> 
> p.s. it's python-2.3.3.

Thanks,
-- 
Marc-Andre Lemburg
eGenix.com

Professional Python Services directly from the Source  (#1, Sep 11 2004)
 >>> Python/Zope Consulting and Support ...        http://www.egenix.com/
 >>> mxODBC.Zope.Database.Adapter ...             http://zope.egenix.com/
 >>> mxODBC, mxDateTime, mxTextTools ...        http://python.egenix.com/
________________________________________________________________________

::: Try mxODBC.Zope.DA for Windows,Linux,Solaris,FreeBSD for free ! ::::