#1059984 cdebootstrap: segfaults in the absence of an Origin

Package:
cdebootstrap
Source:
cdebootstrap
Description:
Bootstrap a Debian system
Submitter:
Helmut Grohne
Date:
2024-01-04 11:09:10 UTC
Severity:
normal
#1059984#5
Date:
2024-01-04 10:20:30 UTC
From:
To:
Hi,

cdebootstrap segfaults for me. I pointed it at a repository whose
Release file lacks an Origin. Hence suite_config_select[1] is called
with an origin argument pointing to NULL. It then passes that to
strcasecmp[2], which gets rather unhappy. As a workaround, and Origin
field can be added to the Release file, but I think cdebootstrap should
not segfault in a NULL pointer dereference.

Helmut

[1] https://sources.debian.org/src/cdebootstrap/0.7.8/src/suite_config.c/#L313
[2] https://sources.debian.org/src/cdebootstrap/0.7.8/src/suite_config.c/#L328