GNU bug report logs - #15100
Division by zero in bytevector->uint-list

Previous Next

Package: guile;

Reported by: Göran Weinholt <goran <at> weinholt.se>

Date: Thu, 15 Aug 2013 11:26:01 UTC

Severity: normal

Done: Mark H Weaver <mhw <at> netris.org>

Bug is archived. No further changes may be made.

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 15100 in the body.
You can then email your comments to 15100 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to bug-guile <at> gnu.org:
bug#15100; Package guile. (Thu, 15 Aug 2013 11:26:01 GMT) Full text and rfc822 format available.

Acknowledgement sent to Göran Weinholt <goran <at> weinholt.se>:
New bug report received and forwarded. Copy sent to bug-guile <at> gnu.org. (Thu, 15 Aug 2013 11:26:02 GMT) Full text and rfc822 format available.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Göran Weinholt <goran <at> weinholt.se>
To: bug-guile <at> gnu.org
Subject: Division by zero in bytevector->uint-list
Date: Thu, 15 Aug 2013 13:02:16 +0200
[Message part 1 (text/plain, inline)]
Hello schemers,

the bytevector->uint-list procedure from (rnrs) can crash Guile through
a division by zero:

scheme@(guile-user)> (import (rnrs))
scheme@(guile-user)> (bytevector->uint-list #vu8(0) 'x 0)
Floating point exception

The same happens with bytevector->sint-list. These procedures also do
not check that the length of the bytevector is divisible by the size.

Tested with GNU Guile 2.0.9.71-8d5d04.

Regards,

-- 
Göran Weinholt <goran <at> weinholt.se>
"What's worse than clowns? Danish clowns."
  -- Mystery Science Theatre 3000
[Message part 2 (application/pgp-signature, inline)]

Reply sent to Mark H Weaver <mhw <at> netris.org>:
You have taken responsibility. (Sat, 17 Aug 2013 03:20:03 GMT) Full text and rfc822 format available.

Notification sent to Göran Weinholt <goran <at> weinholt.se>:
bug acknowledged by developer. (Sat, 17 Aug 2013 03:20:07 GMT) Full text and rfc822 format available.

Message #10 received at 15100-done <at> debbugs.gnu.org (full text, mbox):

From: Mark H Weaver <mhw <at> netris.org>
To: Göran Weinholt <goran <at> weinholt.se>
Cc: 15100-done <at> debbugs.gnu.org
Subject: Re: bug#15100: Division by zero in bytevector->uint-list
Date: Fri, 16 Aug 2013 23:19:15 -0400
Göran Weinholt <goran <at> weinholt.se> writes:

> the bytevector->uint-list procedure from (rnrs) can crash Guile through
> a division by zero:
>
> scheme@(guile-user)> (import (rnrs))
> scheme@(guile-user)> (bytevector->uint-list #vu8(0) 'x 0)
> Floating point exception
>
> The same happens with bytevector->sint-list.

Fixed in 088cfb7d761b01a2620d78f10e8dbcaa07485a32.

> These procedures also do not check that the length of the bytevector
> is divisible by the size.

I don't think we can fix this in stable-2.0, because some existing code
might depend on our current permissive behavior.  However, I fixed it on
the master branch in c099201da1de71652b9791fb0a3a863b6d3c355d.

    Thanks!
      Mark




bug archived. Request was from Debbugs Internal Request <help-debbugs <at> gnu.org> to internal_control <at> debbugs.gnu.org. (Sat, 14 Sep 2013 11:24:03 GMT) Full text and rfc822 format available.

This bug report was last modified 10 years and 198 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.