[Bug 1352997] [NEW] One time of 256, session is opened incorrectly

Dmitry Shachnev mitya57 at gmail.com
Tue Aug 5 16:33:28 UTC 2014


Public bug reported:

== Impact ==
Sometimes (one time of 256), the binary representation of common secret is 255 bytes long instead of 256, which makes the session invalid, and encrypting/decrypting produces wrong results (or crashes).

This will lead to end-user tools (like most tools in ubuntu-dev-tools)
to be working incorrectly.

== Test case ==
This can be easily reproduced by running upstream test suite (for example via autopkgtest) many times.

== Development fix ==
Fixed in 2.1.1, which is now in utopic

https://github.com/mitya57/secretstorage/commit/d55efce2c04b053c

== Regression Potential ==
Two-lines fix, does not cause any regressions

** Affects: python-secretstorage (Ubuntu)
     Importance: Medium
     Assignee: Dmitry Shachnev (mitya57)
         Status: In Progress


** Tags: sru trusty

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to python-secretstorage in Ubuntu.
https://bugs.launchpad.net/bugs/1352997

Title:
  One time of 256, session is opened incorrectly

Status in “python-secretstorage” package in Ubuntu:
  In Progress

Bug description:
  == Impact ==
  Sometimes (one time of 256), the binary representation of common secret is 255 bytes long instead of 256, which makes the session invalid, and encrypting/decrypting produces wrong results (or crashes).

  This will lead to end-user tools (like most tools in ubuntu-dev-tools)
  to be working incorrectly.

  == Test case ==
  This can be easily reproduced by running upstream test suite (for example via autopkgtest) many times.

  == Development fix ==
  Fixed in 2.1.1, which is now in utopic

  https://github.com/mitya57/secretstorage/commit/d55efce2c04b053c

  == Regression Potential ==
  Two-lines fix, does not cause any regressions

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/python-secretstorage/+bug/1352997/+subscriptions



More information about the foundations-bugs mailing list