[Bug 2087848] Re: apt-ftparchive: More static buffers

Julian Andres Klode 2087848 at bugs.launchpad.net
Tue Feb 24 14:53:51 UTC 2026


** Description changed:

- Line buffers are 1000 bytes and can be truncated; the cache database
- keys are truncated to 600 bytes, potentially causing growing databases.
+ [Impact]
+ Various static buffer lengths cause silent truncation of cache data or incorrect skipping of override lists:
+ 
+ 
+ Line buffers are 1000 bytes and can be truncated; the cache database keys are truncated to 600 bytes, potentially causing growing databases.
+ 
+ [Test plan]
+ Artificial test plans are included in the regression test suite run by autopkgtest.
+ 
+ [Where problems could occur]
+ In apt-ftparchive with long overrides or long file paths.
+ 
+ This change has been shipped since plucky and should be considered safe.

** Also affects: apt (Ubuntu Jammy)
   Importance: Undecided
       Status: New

** Also affects: apt (Ubuntu Noble)
   Importance: Undecided
       Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to apt in Ubuntu.
https://bugs.launchpad.net/bugs/2087848

Title:
  apt-ftparchive: More static buffers

Status in apt package in Ubuntu:
  Fix Released
Status in apt source package in Jammy:
  New
Status in apt source package in Noble:
  New

Bug description:
  [Impact]
  Various static buffer lengths cause silent truncation of cache data or incorrect skipping of override lists:

  
  Line buffers are 1000 bytes and can be truncated; the cache database keys are truncated to 600 bytes, potentially causing growing databases.

  [Test plan]
  Artificial test plans are included in the regression test suite run by autopkgtest.

  [Where problems could occur]
  In apt-ftparchive with long overrides or long file paths.

  This change has been shipped since plucky and should be considered
  safe.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/2087848/+subscriptions




More information about the foundations-bugs mailing list