#1109923 sg3-utils: len variable gets clobbered in std_inq_decode resulting the the omission of several properties

Package:
sg3-utils
Source:
sg3-utils
Description:
utilities for devices using the SCSI command set
Submitter:
Thomas Lamprecht
Date:
2026-07-14 19:19:03 UTC
Severity:
normal
Tags:
#1109923#5
Date:
2025-07-26 09:47:42 UTC
From:
To:
Dear Maintainer,

please consider backporting a [fix] for a regression [issue] introduced
in sg3-utils 1.48.

Basically, a variable tracking len in the function scope gets clobbered
in various if scopes when encoding whitespace, thus cutting of
information, and potentially having worse effects. Quoting parts of the
upstream [issue] report:
not received any comment upstream, it seems small and targeted.
FWIW, we (Proxmox) will likealy prepare a downsttream package for this
in any case.

Thanks!
 Thomas

[fix]: https://github.com/doug-gilbert/sg3_utils/pull/64/files
[issue] https://github.com/doug-gilbert/sg3_utils/issues/63

Versions of packages sg3-utils depends on:
ii  libc6             2.41-10
ii  libsgutils2-1.48  1.48-2

#1109923#12
Date:
2025-08-02 13:12:36 UTC
From:
To:
Control: affects -1 - release-notes

release-notes now mention this here:
https://www.debian.org/releases/trixie/release-notes/issues.en.html#udev-properties-from-sg3-utils-missing

Chris

#1109923#19
Date:
2025-08-17 11:53:20 UTC
From:
To:
We believe that the bug you reported is fixed in the latest version of
sg3-utils, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1109923@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Jonathan McDowell <noodles@earth.li> (supplier of updated sg3-utils package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Sun, 17 Aug 2025 12:28:23 +0100
Source: sg3-utils
Architecture: source
Version: 1.48-3
Distribution: unstable
Urgency: medium
Maintainer: Ritesh Raj Sarraf <rrs@debian.org>
Changed-By: Jonathan McDowell <noodles@earth.li>
Closes: 1109923
Changes:
 sg3-utils (1.48-3) unstable; urgency=medium
 .
   * Add fix for missing output fields in sg_inq (Closes: #1109923)
Checksums-Sha1:
 4fea0b455953273cb81c673a3b1dd7efcf679f1c 2219 sg3-utils_1.48-3.dsc
 953a8ced39c7fe3c5733a1e587b89f8e4317bb63 14680 sg3-utils_1.48-3.debian.tar.xz
 6140ce7cf30e53978c35455a4d390f441a2a8bf4 7102 sg3-utils_1.48-3_amd64.buildinfo
Checksums-Sha256:
 a08833a32089fd011447a4c07e26f379ac1a79f139a6386bf9f3c7d1ae38e70d 2219 sg3-utils_1.48-3.dsc
 f8605fe75d3275ad71b9cd98ba5100d0a204c98da0eb97273be0810f712e0e5f 14680 sg3-utils_1.48-3.debian.tar.xz
 ad43d3a8fb53f26042fbbf684a91a63805f260989c634889c0e802329a262134 7102 sg3-utils_1.48-3_amd64.buildinfo
Files:
 53fbfdccb48914c1b58c63a329881113 2219 admin optional sg3-utils_1.48-3.dsc
 3e1789cbcf1b506f2ba48ebe1c11b7ad 14680 admin optional sg3-utils_1.48-3.debian.tar.xz
 bb03fd546aa2b5f55c010d53674fbf24 7102 admin optional sg3-utils_1.48-3_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
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=hBmi
-----END PGP SIGNATURE-----

#1109923#30
Date:
2026-07-14 19:17:06 UTC
From:
To:
We believe that the bug you reported is fixed in the latest version of
sg3-utils, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1109923@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Salvatore Bonaccorso <carnil@debian.org> (supplier of updated sg3-utils package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Tue, 30 Jun 2026 13:28:52 +0200
Source: sg3-utils
Architecture: source
Version: 1.48-3~deb13u1
Distribution: trixie
Urgency: medium
Maintainer: Ritesh Raj Sarraf <rrs@debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Closes: 1109923
Changes:
 sg3-utils (1.48-3~deb13u1) trixie; urgency=medium
 .
   * Rebuild for trixie.
 .
 sg3-utils (1.48-3) unstable; urgency=medium
 .
   * Add fix for missing output fields in sg_inq (Closes: #1109923)
Checksums-Sha1:
 ef77ce6e73db0df74dba02e96651127c7d42a1f6 2406 sg3-utils_1.48-3~deb13u1.dsc
 bf98722594d24a72026397252ec98cf3c753c38f 14700 sg3-utils_1.48-3~deb13u1.debian.tar.xz
 5d34d17a3d67add7c85ed8bd9736a80ead38dbe2 6250 sg3-utils_1.48-3~deb13u1_source.buildinfo
Checksums-Sha256:
 6abebe227c5a18bb7e5885984d08a552f9379ef13f39e2a06b049094109a3d49 2406 sg3-utils_1.48-3~deb13u1.dsc
 15b68011eff300cfce2ca6402df47177729d3ab5bae0c097e77c317a0cd77936 14700 sg3-utils_1.48-3~deb13u1.debian.tar.xz
 5392b53d35de20d2fb31b83ca99ba4ff78a232c39fc5d8996c5c518859a88f86 6250 sg3-utils_1.48-3~deb13u1_source.buildinfo
Files:
 ff7eaa1b4ec4dd4afcd7e94f4c2394fc 2406 admin optional sg3-utils_1.48-3~deb13u1.dsc
 e888c9c23bc78c7cd4b7e79f97f21800 14700 admin optional sg3-utils_1.48-3~deb13u1.debian.tar.xz
 6a79f18b36bd19ba8bbada2b707cae91 6250 admin optional sg3-utils_1.48-3~deb13u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----

iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmpVtFhfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk
ZWJpYW4ub3JnAAoJEAVMuPMTQ89EhugP/iRsJPWVizlWz2SpPsNncur9Q4t3pqXJ
4XSzDlmfhmS+rcr+81iCig15AHG+K17DY9q+BV3cRT+CMPNbqw3tMW3sleErV88y
b0OPl91hgTCe+zeVZJkmEHBioNfZOBjv530n8OUYfp9bWteOrHNro33qyNBPaJap
xuhrY5fhWrJqDEzhUoW+bHyzXrgQFxE1snA2mVVS8YaCkxrZMakcw8spOUON10CK
ACvbYbuWLqkUBL0+eYD3s3U9IjOdSvGaylIv/7PBE54YhH06/o4x9wYR6ZnJJcuE
RKCV51TM+wuR0JjHJFObIXDXz1NMvqAiMTB9kS4KwQujiJfNWpWcjc8JS4lyE2t1
VwzLR6GjVTtRG7SlGcx04JYxbwc048cZ0gs45uXs1qkvsnPbRmLk/2AARxuCHctr
MymZkRPW8kDJQvRNmXuKOH9JL1wcbxL4DrqnPcygvnI0z/pyeHhGVYN+0uJMTNLY
kWdEshY1Lqs0uXHJawwKVyYcVDykPkWvkUQc1yxa4emfn47ptF9naDNKhU90fGwd
SeuFuBomvEu3mXhcs/4FPc7hlyXS49aS0bMM6NM3jEfgEuS5S3RtoaOJQdjTneZh
IGhadEpact2B1bKmehpGrmaRnaSe+ArFJNXvM5GHQj5BdlG11sCYoBL1VA1MUo4N
4qoYLBZLAVU6
=ZyoO
-----END PGP SIGNATURE-----