#548074 [liblog4cxx] Inproper signal handling for spawned threads

Package:
src:log4cxx
Source:
log4cxx
Submitter:
Daniel Burrows
Date:
2022-06-20 07:24:04 UTC
Severity:
normal
Tags:
#548074#5
Date:
2009-09-23 15:32:14 UTC
From:
To:
  In a multithreaded program, POSIX signals are sent to an arbitrary
thread that hasn't blocked them via sigprocmask().  This means that
when it matters which thread gets the signal -- for instance, if
sigwait() is being used to serialize signals -- the program must ensure
that every other thread has blocked the signal in question.  Otherwise,
the signal might be delivered to the wrong thread and lost.

  liblog4cxx automatically starts threads sometimes, and it doesn't
adjust their thread masks.  It really should block out every signal
that it isn't interested in itself, so that programs using sigwait()
can also use log4cxx.

  See also #547212.

  Daniel

#548074#20
Date:
2021-09-16 06:31:57 UTC
From:
To:
Upstream is currently in preparation for a new release (0.12.1) where this
problem is fixed.

This is the changeset to fix the problem:
https://github.com/apache/logging-log4cxx/pull/70

I'll package it once upstream has released 0.12.1.

#548074#29
Date:
2021-12-15 05:57:49 UTC
From:
To:
Control: reassign -1 liblog4cxx11
Control: affects -1 liblog4cxx10
Control: affects -1 liblog4cxx12

#548074#54
Date:
2022-05-27 10:00:12 UTC
From:
To:
We believe that the bug you reported is fixed in the latest version of
log4cxx, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 548074@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Tobias Frost <tobi@debian.org> (supplier of updated log4cxx package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Wed, 25 May 2022 12:37:54 +0200
Source: log4cxx
Binary: liblog4cxx-dev liblog4cxx-doc liblog4cxx13 liblog4cxx13-dbgsym
Architecture: source amd64 all
Version: 0.13.0-1
Distribution: experimental
Urgency: medium
Maintainer: Tobias Frost <tobi@debian.org>
Changed-By: Tobias Frost <tobi@debian.org>
Description:
 liblog4cxx-dev - Logging library for C++ (development files)
 liblog4cxx-doc - Documentation for log4cxx
 liblog4cxx13 - Logging library for C++
Closes: 548074
Changes:
 log4cxx (0.13.0-1) experimental; urgency=medium
 .
   * New upstream release, fixing an old threading/signal bug (Closes: #548074).
   * Upload to experimental for the library transition.
   * Adapt packaing for SONAME bump to 13.
   * Removing all patches, as they have been applied upstream.
   * Update d/copyright years.
   * Update patch required for autopkgtest.
   * Disable inetaddresstestcase -- needs network.
   * Update lintian overrides.
   * Disable flaky tests during build.
Checksums-Sha1:
 d52d931bd15b425f1e27d0b19d5189a663d8de8f 2427 log4cxx_0.13.0-1.dsc
 1795c655cd761282ca30e35ef37a3983e7bda6e9 551303 log4cxx_0.13.0.orig.tar.gz
 6b6b7d0b77cc53a553bd745162b7f37db6a2da8b 833 log4cxx_0.13.0.orig.tar.gz.asc
 499084f6895830ba4d5bcf322ae0729ad56a525a 32956 log4cxx_0.13.0-1.debian.tar.xz
 6505e370ca8aefd755e2138eab3a7da286d0dcc3 109848 liblog4cxx-dev_0.13.0-1_amd64.deb
 37b3d99add8e933d17fa80e9e240b1fa21a66609 1174240 liblog4cxx-doc_0.13.0-1_all.deb
 4cead476c0c2894c620d6817a80147edfe509436 5789668 liblog4cxx13-dbgsym_0.13.0-1_amd64.deb
 2545b795cf375cec4bc73ca95032e80c95e4b6a2 458992 liblog4cxx13_0.13.0-1_amd64.deb
 b358e35650d7a41da14f3e25c9a8aa3b70972341 9670 log4cxx_0.13.0-1_amd64.buildinfo
Checksums-Sha256:
 2d3c06b1d2fdb5879e35c608a01e9f907f5a7ca3185cea327329bd4d3d7378e1 2427 log4cxx_0.13.0-1.dsc
 4e5be64b6b1e6de8525f8b87635270b81f772a98902d20d7ac646fdf1ac08284 551303 log4cxx_0.13.0.orig.tar.gz
 db6947f84b37ecde28a8f766a048cfe979059c327d7da4aa1af93e11896c4773 833 log4cxx_0.13.0.orig.tar.gz.asc
 6b7fdf6f568bb8bc04e68c3ce2900d69c9d50146eb43c2408361efd5e3d78df2 32956 log4cxx_0.13.0-1.debian.tar.xz
 218914c63443c068c8e59c9efe076836f92a3eacdd9d3db548b4884cc1c04885 109848 liblog4cxx-dev_0.13.0-1_amd64.deb
 b0c941cdfa80fb51aac0a3bf92545005e2805e3db49e710d166f1e54caea425b 1174240 liblog4cxx-doc_0.13.0-1_all.deb
 83ce446326d5704201bbd798222c543b24e17c33d93d8a7b08773b3dbb36ae6c 5789668 liblog4cxx13-dbgsym_0.13.0-1_amd64.deb
 3cedc64010de84a2746d68ed39516d9d8b574573dffab9600480ceb9e7653036 458992 liblog4cxx13_0.13.0-1_amd64.deb
 11baee4d9d6576add47e76b0ec5dcb5254afa640f3e85e4c35125d4a95ebb675 9670 log4cxx_0.13.0-1_amd64.buildinfo
Files:
 dfa4b5bf813952c4cfa3d0c2bc62ab03 2427 devel optional log4cxx_0.13.0-1.dsc
 d7a6e3a85c54ea2e859c5f8a04c94476 551303 devel optional log4cxx_0.13.0.orig.tar.gz
 acf556abfb0c0cc101da6078e2670cb0 833 devel optional log4cxx_0.13.0.orig.tar.gz.asc
 a37a2943784c2682dc8b8674a76616ee 32956 devel optional log4cxx_0.13.0-1.debian.tar.xz
 2c0276e682f5cf18df75d2030c3b62d0 109848 libdevel optional liblog4cxx-dev_0.13.0-1_amd64.deb
 5575da1926bac80d2988808fd7a0b76b 1174240 doc optional liblog4cxx-doc_0.13.0-1_all.deb
 5f6ae0130167e3fd9b097fd745ad2816 5789668 debug optional liblog4cxx13-dbgsym_0.13.0-1_amd64.deb
 0a06e6db534fe92c88a95412d3590651 458992 libs optional liblog4cxx13_0.13.0-1_amd64.deb
 a32d5baffc57485a5e2280cd12493c91 9670 devel optional log4cxx_0.13.0-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
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=MIdd
-----END PGP SIGNATURE-----