xulrunner ships some images as executables

Bug #252793 reported by Սահակ
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
xulrunner (Ubuntu)
Invalid
Undecided
Unassigned
Nominated for Jaunty by Սահակ
Nominated for Karmic by Սահակ
xulrunner-1.9 (Ubuntu)
Fix Released
Low
Unassigned
Nominated for Jaunty by Սահակ
Nominated for Karmic by Սահակ

Bug Description

the following icons are executable in xulrunner-1.9.0.1

/usr/lib/xulrunner-1.9.0.1/chrome/icons/default/default16.png
/usr/lib/xulrunner-1.9.0.1/chrome/icons/default/default32.png
/usr/lib/xulrunner-1.9.0.1/chrome/icons/default/default48.png
/usr/lib/xulrunner-1.9.0.1/icons/document.png
/usr/lib/xulrunner-1.9.0.1/res/html/folder.png

they should not be executable.

Revision history for this message
Paolo Naldini (hattory) wrote :

I'm working on this.

Changed in xulrunner:
assignee: nobody → hattory
status: New → In Progress
Revision history for this message
Devid Antonio Filoni (d.filoni) wrote :

Changed package.

Revision history for this message
Paolo Naldini (hattory) wrote :

The debdiff

Changed in xulrunner-1.9:
assignee: hattory → nobody
status: In Progress → Confirmed
Revision history for this message
Saša Bodiroža (jazzva) wrote :

Hello Paolo,

Thank you for your patch. It is applied to the development branch, so marking as Fix committed. The bug will auto-close once it gets published.

Changed in xulrunner-1.9:
importance: Undecided → Low
status: Confirmed → Fix Committed
Revision history for this message
Alexander Sack (asac) wrote :

unsubscribed main sponsors as this should go through mozillateam.

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package xulrunner-1.9 - 1.9.0.2+build3+nobinonly-0ubuntu1

---------------
xulrunner-1.9 (1.9.0.2+build3+nobinonly-0ubuntu1) intrepid; urgency=low

  [ Sasa Bodiroza ]
  * In debian/rules:
    - Set 644 chmod to png files (LP: #252793) [Patch by Paolo Naldini]

  [ Fabien Tassin ]
  * improve create-build-system.sh to detect build-tree directory
    when embedded tarball is used. Fix un-escaped variables.
    Create build-system.tar.gz in the debian directory to prevent
    cdbs to check and unpack it during the build
    - update debian/create-build-system.sh
  * Fix variables when an embedded tarball is used
    - update debian/rules
  * Fix buffer overflow in realpath() at runtime and drop -U_FORTIFY_SOURCE
    from CPPFLAGS (LP: #263014)
    - add debian/patches/bz412610_att335369_realpath_overflow.patch
    - update debian/patches/series

  [ Alexander Sack <email address hidden> ]
  * introduce preferred plugins by mime-type experimental feature;
    you can now set a pref to explicitly select a plugin to serve a particilar
    mime-type; patch contains further documentation.
    - add debian/patches/bzXXX_plugin_for_mimetype_pref.patch
    - update debian/patches/series
  * drop patches applied upstream
    - drop bz120380_att326044.patch (fixed by bz442629)
    - update debian/patches/series

 -- Fabien Tassin <email address hidden> Tue, 2 Sep 2008 11:54:00 +0200

Changed in xulrunner-1.9:
status: Fix Committed → Fix Released
Revision history for this message
Սահակ (petrosyan) wrote :

this bug is still present in Ubuntu 9.04

The following png files are executable:
/usr/lib/xulrunner-1.9.0.6/chrome/icons/default/default16.png
/usr/lib/xulrunner-1.9.0.6/chrome/icons/default/default32.png
/usr/lib/xulrunner-1.9.0.6/chrome/icons/default/default48.png
/usr/lib/xulrunner-1.9.0.6/icons/document.png
/usr/lib/xulrunner-1.9.0.6/res/html/folder.png

Changed in xulrunner-1.9:
status: Fix Released → New
Revision history for this message
Սահակ (petrosyan) wrote :

this bug has been fixed in Ubuntu-9.10 , xulrunner-1.9.1.2

Changed in xulrunner-1.9 (Ubuntu):
status: New → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.