#1012704 Does not work with current perl anymore

Package:
ipcalc
Source:
ipcalc
Submitter:
Klaus Ethgen
Date:
2023-03-31 15:51:05 UTC
Severity:
normal
Tags:
#1012704#5
Date:
2022-06-12 07:23:48 UTC
From:
To:
`ipcalc 61.177.0.0 - 61.177.255.255` should give 61.177.0.0/16 but it
runs endless now until I hit ctrl-c. I remember, that worked in the
past...

There was no ipcalc update in the last time but there was a perl update
to 5.34.

   ~> ipcalc 61.177.0.0 - 61.177.255.255
   deaggregate 61.177.0.0 - 61.177.255.255
   Deep recursion on subroutine "Math::BigInt::bior" at /usr/share/perl5/Math/BigFloat.pm line 3856.
   Deep recursion on subroutine "Math::BigFloat::bior" at /usr/share/perl5/Math/BigInt.pm line 3495.

#1012704#16
Date:
2022-09-18 11:14:06 UTC
From:
To:
I was able to fix that bug by taking Math::BigInt and Math::BigFloat
from perl 5.36. They work seamless.

I will reassign the bug to perl-modules.

#1012704#23
Date:
2022-09-19 20:51:10 UTC
From:
To:
retitle 1012704 libmath-bigint-perl: busy loop with bignum bitwise operations
severity 1012704 serious
reassign 1012704 libmath-bigint-perl 1.999835-1
found 1012704 1.999837-1
tag 1012704 upstream
thanks

Thanks for the report.

This boils down to

  % perl -Mbignum -e '1 | (1 >> 1)'
  Deep recursion on subroutine "Math::BigInt::bior" at /usr/share/perl5/Math/BigFloat.pm line 3883.
  Deep recursion on subroutine "Math::BigFloat::bior" at /usr/share/perl5/Math/BigInt.pm line 3513.

Also happens with other bitwise operations like & and ^ .

The bug is not specific to any Perl versions but seems to be fully
contained in Math::BigInt / Math::BigFloat.  The versions of those
modules that ship with Perl 5.34.0 (Math::BigInt 1.999818) and Perl
5.36.0 (Math::BigInt 1.999830) are not affected by the bug, but you
have the newer separate libmath-bigint-perl package installed where the
bug triggers.

It seems to have regressed upstream around 1.999832 (where it started
to spit errors) and 1.999834 (where the errors became infinite recursion.)
The first version in Debian that had the bug was 1.999835-1, which
fits your upgrade timeline.

So I'm reassigning this once more. Also raising the severity as this looks
rather Bad.

Would be great if (other) pkg-perl maintainers can pick this up from
here and forward upstream etc. Otherwise I'll get to it eventually :)

#1012704#46
Date:
2023-02-24 11:56:12 UTC
From:
To:
versions of Math::BigInt available in bookworm at the moment:
- 1.999830 in perl-modules-5.36
- 1.999837 in libmath-bigint-perl

Since 1.999837 breaks at least ipcalc, it may be better to remove
libmath-bigint-perl 1.999837 from bookworm than releasing with a
broken version.

Since this means a fallback to 1.999830 from perl-modules-5.36, this
should not be an issue.

Greetings
Roland

#1012704#51
Date:
2023-02-25 14:11:48 UTC
From:
To:
Version: 1.6011-2+b1
Depends: ..., libmath-bigint-perl (>= 1.999831)

cu
Adrian

#1012704#54
Date:
2023-03-31 15:08:36 UTC
From:
To:
Hello,

Bug #1012704 in libmath-bigint-perl reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/perl-team/modules/packages/libmath-bigint-perl/-/commit/c6ef1dfab5fa9d2d46bcd5c53931faf23e640b69
------------------------------------------------------------------------
New upstream version 1.999838

which fixes infinite recursion in bitwise operations
(Closes: #1012704, #1017042).
------------------------------------------------------------------------

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/1012704

#1012704#61
Date:
2023-03-31 15:49:09 UTC
From:
To:
We believe that the bug you reported is fixed in the latest version of
libmath-bigint-perl, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1012704@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Roland Rosenfeld <roland@debian.org> (supplier of updated libmath-bigint-perl package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Fri, 31 Mar 2023 17:13:30 +0200
Source: libmath-bigint-perl
Architecture: source
Version: 1.999838-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org>
Changed-By: Roland Rosenfeld <roland@debian.org>
Closes: 1012704 1017042
Changes:
 libmath-bigint-perl (1.999838-1) unstable; urgency=medium
 .
   * New upstream version 1.999838, which fixes infinite recursion in
     bitwise operations (Closes: #1012704, #1017042).
   * Update d/upstream/metadata pointing bugs to rt.cpan.org.
   * Add myself to uploaders.
   * Add debian/salsa-ci.yml.
Checksums-Sha1:
 02e92c82b185ccf91357fa3399e157d62088fa66 2224 libmath-bigint-perl_1.999838-1.dsc
 b28f972b59bf3441cd16946db05cb90d655ccda7 2870131 libmath-bigint-perl_1.999838.orig.tar.gz
 059919432eeeb97dfdbe22a9678c6c74db6c451e 4136 libmath-bigint-perl_1.999838-1.debian.tar.xz
 218efe207d74496765aa3754b254adfe57e0cb28 5891 libmath-bigint-perl_1.999838-1_source.buildinfo
Checksums-Sha256:
 fb604897131527c1ce1a0ce2be206c51688ae73b49ef343ed6d064058d1debf7 2224 libmath-bigint-perl_1.999838-1.dsc
 d3c2fb37d412ac8d126452caad5764f02193147261b59c56e652167c41d1e9d5 2870131 libmath-bigint-perl_1.999838.orig.tar.gz
 6ca68e1b2db2b6fafaafd6710de9b832693271d4474a22a11cdb2b6430d7a3b7 4136 libmath-bigint-perl_1.999838-1.debian.tar.xz
 45dfebb28371457425f33c2204a1162493b1ed6cb7ab2bde6c41fc7e3fe9c167 5891 libmath-bigint-perl_1.999838-1_source.buildinfo
Files:
 74a2799a35fb0cfe3ad6988714c474af 2224 perl optional libmath-bigint-perl_1.999838-1.dsc
 cc803e6c4f1cfac5ad9fc53e4c279a5c 2870131 perl optional libmath-bigint-perl_1.999838.orig.tar.gz
 8e0a7ea4c1cc348ebd1578cc90dddc36 4136 perl optional libmath-bigint-perl_1.999838-1.debian.tar.xz
 6585d22ce28ab5c400589cfc27769f6f 5891 perl optional libmath-bigint-perl_1.999838-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
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=JdtX
-----END PGP SIGNATURE-----

#1012704#66
Date:
2023-03-31 15:49:09 UTC
From:
To:
We believe that the bug you reported is fixed in the latest version of
libmath-bigint-perl, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1017042@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Roland Rosenfeld <roland@debian.org> (supplier of updated libmath-bigint-perl package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Fri, 31 Mar 2023 17:13:30 +0200
Source: libmath-bigint-perl
Architecture: source
Version: 1.999838-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org>
Changed-By: Roland Rosenfeld <roland@debian.org>
Closes: 1012704 1017042
Changes:
 libmath-bigint-perl (1.999838-1) unstable; urgency=medium
 .
   * New upstream version 1.999838, which fixes infinite recursion in
     bitwise operations (Closes: #1012704, #1017042).
   * Update d/upstream/metadata pointing bugs to rt.cpan.org.
   * Add myself to uploaders.
   * Add debian/salsa-ci.yml.
Checksums-Sha1:
 02e92c82b185ccf91357fa3399e157d62088fa66 2224 libmath-bigint-perl_1.999838-1.dsc
 b28f972b59bf3441cd16946db05cb90d655ccda7 2870131 libmath-bigint-perl_1.999838.orig.tar.gz
 059919432eeeb97dfdbe22a9678c6c74db6c451e 4136 libmath-bigint-perl_1.999838-1.debian.tar.xz
 218efe207d74496765aa3754b254adfe57e0cb28 5891 libmath-bigint-perl_1.999838-1_source.buildinfo
Checksums-Sha256:
 fb604897131527c1ce1a0ce2be206c51688ae73b49ef343ed6d064058d1debf7 2224 libmath-bigint-perl_1.999838-1.dsc
 d3c2fb37d412ac8d126452caad5764f02193147261b59c56e652167c41d1e9d5 2870131 libmath-bigint-perl_1.999838.orig.tar.gz
 6ca68e1b2db2b6fafaafd6710de9b832693271d4474a22a11cdb2b6430d7a3b7 4136 libmath-bigint-perl_1.999838-1.debian.tar.xz
 45dfebb28371457425f33c2204a1162493b1ed6cb7ab2bde6c41fc7e3fe9c167 5891 libmath-bigint-perl_1.999838-1_source.buildinfo
Files:
 74a2799a35fb0cfe3ad6988714c474af 2224 perl optional libmath-bigint-perl_1.999838-1.dsc
 cc803e6c4f1cfac5ad9fc53e4c279a5c 2870131 perl optional libmath-bigint-perl_1.999838.orig.tar.gz
 8e0a7ea4c1cc348ebd1578cc90dddc36 4136 perl optional libmath-bigint-perl_1.999838-1.debian.tar.xz
 6585d22ce28ab5c400589cfc27769f6f 5891 perl optional libmath-bigint-perl_1.999838-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
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=JdtX
-----END PGP SIGNATURE-----