MyPasswordSafe crashes on file save

[atomic-penguin]

Binary package hint: mypasswordsafe

DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=7.10
DISTRIB_CODENAME=gutsy
DISTRIB_DESCRIPTION="Ubuntu 7.10"

Package: mypasswordsafe
Binary: mypasswordsafe
Version: 0.0.20050615-2
Priority: optional
Section: universe/utils
Maintainer: Felipe Augusto van de Wiel (faw) <email address hidden>
Build-Depends: debhelper (>= 4.0.0), libboost-dev, libqt3-mt-dev, qt3-dev-tools
Architecture: any
Standards-Version: 3.6.2
Format: 1.0
Directory: pool/universe/m/mypasswordsafe
Files:
397ff76106b4be8a6f061b4e5ce51494 670 mypasswordsafe_0.0.20050615-2.dsc
6df19b8a52d5761e8ab306b3d447bc17 819293 mypasswordsafe_0.0.20050615.orig.tar.gz
9c66601e6b7161cd4fa1987e4df56269 3792 mypasswordsafe_0.0.20050615-2.diff.gz

mypasswordsafe:
Installed: 0.0.20050615-2
Candidate: 0.0.20050615-2
Version table:
*** 0.0.20050615-2 0
500 http://us.archive.ubuntu.com gutsy/universe Packages
100 /var/lib/dpkg/status

"File->Save" and "File->Save As" both result in MyPasswordSafe crashing while trying to save changes to, or a copy of a password safe file.

Output after "File->Save":
*** stack smashing detected ***: MyPasswordSafe terminated
Aborted (core dumped)

It seems this is related to gcc-4.1 stack protection. I was able to do a dpkg-buildpackage against the source package with g++-3.3 and avoid the core dump, when I used the rebuilt package. I never had this problem with this package on the x86 architecture. I've only had this happen with the amd64 arch MyPasswordSafe.

ProblemType: Bug
Architecture: amd64
Date: Wed Mar 5 23:23:44 2008
DistroRelease: Ubuntu 7.10
ExecutablePath: /usr/bin/MyPasswordSafe
NonfreeKernelModules: nvidia
Package: mypasswordsafe 0.0.20050615-2
PackageArchitecture: amd64
ProcCmdline: MyPasswordSafe
ProcCwd: /home/wolfe21
ProcEnviron:
 SHELL=/bin/bash
 PATH=/home/wolfe21/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games
 LANG=en_US.UTF-8
SourcePackage: mypasswordsafe
Uname: Linux wolfe21-ltop 2.6.24.3 #1 SMP Tue Feb 26 21:53:19 EST 2008 x86_64 GNU/Linux

[Hamish Downer (mishd)]

I get the same problem on hardy (amd64). I previously used MyPasswordSafe with gutsy (i386) and had no problems.

$ aptitude show mypasswordsafe
...
Version: 0.0.20050615-2
...

Reading works fine.

As an extra note, the file output when saving is 192 bytes long. And when trying to reopen it with MyPasswordSafe it seems to get stuck in a loop after entering the password - it uses all CPU and doesn't appear to do anything. Killing it is the only way to stop it.

[Mathijs (mdenburger)]

Confirmed here on Hardy amd64. Everything works fine on Hardy i386.

[Hamish Downer (mishd)]

Having looked at bug 221893 I thought I'd try that version. So I downloaded

http://www.semanticgap.com/myps/release/MyPasswordSafe-20061216-amd64.bin.tgz

and tried using that - no problem :)

I have tried building from the source package (had to install qt3-dev-tools) and got some errors. I'll report back if I get it working ...

(Source at http://www.semanticgap.com/myps/release/MyPasswordSafe-20061216.src.tgz )

[Hamish Downer (mishd)]

Also needed to install x11proto-scrnsaver-dev and libxss-dev to get the full compile to work. Once compiled it works fine - I can save files without crashing. So it would appear we just need to use the newer source code.

This bug is in the debian bug tracker aswell - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=358866 - apparently there were plans to try something, but the last comment was August 2007. From there

"Code that causes it exist in serializers.cpp, in BlowfishLizer::readEntry method. After few bytes read,
the readCBC function starts returning 0 which causes do-while loop to never exit (data.length() == 0)."

[Hamish Downer (mishd)]

I've got around to learning to package, so I've packaged up the newer version and put it in my PPA. You can get it by adding the following lines to your /etc/apt/sources.list

deb http://ppa.launchpad.net/mishd/ubuntu hardy main
deb-src http://ppa.launchpad.net/mishd/ubuntu hardy main

Please use it and see if it fixes your problem. If we agree this version fixes it we can see about getting this into Intrepid at least ...

The new version has it's own bug at bug #221893

[Mathijs (mdenburger)]

The newer version fixed this bug for me: saving files on Hardy AMD64 now works fine.

[Graham Bennett (graham33)]

This problem still exists in 9.04 beta, the new version above fixes the problem for me as well.

[atomic-penguin (eric-wolfe)]

Hamish,

Your MyPasswordSafe version 0.0.20061216-1ubuntu1~ppa1 works for me on Ubuntu 8.10 (amd64).

[VF (fviktor)]

Did someone build a deb package for amd64 Ubuntu 9.04?

[VF (fviktor)]

The amd64 binary from

http://www.semanticgap.com/myps/release/MyPasswordSafe-20061216-amd64.bin.tgz

also works on amd64 Ubuntu 9.04, so we can use that instead.

[Alan Porter (alan.porter)]

I tried the MyPasswordSafe-20061216-amd64.bin.tgz build on Karmic / 9.10, and it seems to work.

There is an alternative package, password-gorilla, which is file-compatible with MyPasswordSafe.

Alan

[William Stone III (wrs)]

I can confirm that this bug still exists with stock MyPasswordSafe. The package on Hamish Downer's PPA continues to work with 64-bit Karmic.

To reiterate, Hamish Downer's corrected .deb is available at http://ppa.launchpad.net/mishd/ubuntu/pool/main/m/mypasswordsafe/

[atomic-penguin (eric-wolfe)]

I know there are at least two other bug reports related to this package, both in Debian and Ubuntu bug-tracking.

What is the process to get Hamish's workaround signed off for release?

[Launchpad Janitor (janitor)]

This bug was fixed in the package mypasswordsafe - 0.0.20061216-0ubuntu1

---------------
mypasswordsafe (0.0.20061216-0ubuntu1) lucid; urgency=low

  [ mish ]
  * Upstream release, fixes (LP: #221893)
  * Fixes x86_64 save bug (LP: #199012)
  * Added x11proto-scrnsaver-dev and libxss-dev to Build-Depends

  [ Evan Broder ]
  * Fix FTBFS from upstream clean stage.
  * Fix FTBFS from using same variable name twice.
  * Fix FTBFS from missing header includes.
  * Clean up changes to binary files.
 -- Evan Broder <email address hidden> Mon, 04 Jan 2010 14:22:33 -0500