Bug#1012704: Does not work with current perl anymore

[Klaus Ethgen]

Package: ipcalc
Version: 0.42-2
Severity: normal

`ipcalc 61.177.0.0 - 61.177.255.255` should give 61.177.0.0/16 but it
runs endless now until I hit ctrl-c. I remember, that worked in the
past...

There was no ipcalc update in the last time but there was a perl update
to 5.34.

~> ipcalc 61.177.0.0 - 61.177.255.255
deaggregate 61.177.0.0 - 61.177.255.255
Deep recursion on subroutine "Math::BigInt::bior" at /usr/share/perl5/Math/BigFloat.pm line 3856.
Deep recursion on subroutine "Math::BigFloat::bior" at /usr/share/perl5/Math/BigInt.pm line 3495.

-- System Information:
Debian Release: bookworm/sid
APT prefers experimental
APT policy: (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.16.17 (SMP w/8 CPU threads)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_FIRMWARE_WORKAROUND, TAINT_OOT_MODULE
Locale: LANG=C, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages ipcalc depends on:
ii perl 5.34.0-4

ipcalc recommends no packages.

ipcalc suggests no packages.

-- no debconf information

--
Klaus Ethgen http://www.ethgen.ch/
pub 4096R/4E20AF1C 2011-05-16 Klaus Ethgen <Kl...@Ethgen.ch>
Fingerprint: 85D4 CA42 952C 949B 1753 62B3 79D0 B06F 4E20 AF1C

[Klaus Ethgen]

I was able to fix that bug by taking Math::BigInt and Math::BigFloat
from perl 5.36. They work seamless.

I will reassign the bug to perl-modules.

[Niko Tyni]

retitle 1012704 libmath-bigint-perl: busy loop with bignum bitwise operations
severity 1012704 serious
reassign 1012704 libmath-bigint-perl 1.999835-1
found 1012704 1.999837-1
tag 1012704 upstream
thanks

On Sun, Sep 18, 2022 at 12:14:06PM +0100, Klaus Ethgen wrote:
> I was able to fix that bug by taking Math::BigInt and Math::BigFloat
> from perl 5.36. They work seamless.
>
> I will reassign the bug to perl-modules.

Thanks for the report.

This boils down to

% perl -Mbignum -e '1 | (1 >> 1)'
Deep recursion on subroutine "Math::BigInt::bior" at /usr/share/perl5/Math/BigFloat.pm line 3883.
Deep recursion on subroutine "Math::BigFloat::bior" at /usr/share/perl5/Math/BigInt.pm line 3513.

Also happens with other bitwise operations like & and ^ .

The bug is not specific to any Perl versions but seems to be fully
contained in Math::BigInt / Math::BigFloat. The versions of those
modules that ship with Perl 5.34.0 (Math::BigInt 1.999818) and Perl
5.36.0 (Math::BigInt 1.999830) are not affected by the bug, but you
have the newer separate libmath-bigint-perl package installed where the
bug triggers.

It seems to have regressed upstream around 1.999832 (where it started
to spit errors) and 1.999834 (where the errors became infinite recursion.)
The first version in Debian that had the bug was 1.999835-1, which
fits your upgrade timeline.

So I'm reassigning this once more. Also raising the severity as this looks
rather Bad.

Would be great if (other) pkg-perl maintainers can pick this up from
here and forward upstream etc. Otherwise I'll get to it eventually :)
--
Niko Tyni nt...@debian.org

[Roland Rosenfeld]

On Mo, 19 Sep 2022, Niko Tyni wrote:

> The bug is not specific to any Perl versions but seems to be fully
> contained in Math::BigInt / Math::BigFloat. The versions of those
> modules that ship with Perl 5.34.0 (Math::BigInt 1.999818) and Perl
> 5.36.0 (Math::BigInt 1.999830) are not affected by the bug, but you
> have the newer separate libmath-bigint-perl package installed where the
> bug triggers.
>
> It seems to have regressed upstream around 1.999832 (where it started
> to spit errors) and 1.999834 (where the errors became infinite recursion.)
> The first version in Debian that had the bug was 1.999835-1, which
> fits your upgrade timeline.
>
> So I'm reassigning this once more. Also raising the severity as this looks
> rather Bad.

Since it first wasn't clear to me (and maybe others): There are two
versions of Math::BigInt available in bookworm at the moment:
- 1.999830 in perl-modules-5.36
- 1.999837 in libmath-bigint-perl

Since 1.999837 breaks at least ipcalc, it may be better to remove
libmath-bigint-perl 1.999837 from bookworm than releasing with a
broken version.

Since this means a fallback to 1.999830 from perl-modules-5.36, this
should not be an issue.

Greetings
Roland