bugGNU patch - Bugs: bug #43700, patch with large line number...

 
 

bug #43700: patch with large line number crashes

Submitter:  Hanno Boeck <hanno>
Submitted:  Tue 25 Nov 2014 11:17:56 PM UTC
   
 
Category:  None Severity:  3 - Normal
Item Group:  None Status:  Fixed
Privacy:  Public Assigned to:  None
Open/Closed:  Closed
* Mandatory Fields

Add a New Comment Rich Markup
   

Sun 30 Nov 2014 09:46:22 PM UTC, comment #1: 

Thanks, this is fixed in commit 7a988615.

Andreas Gruenbacher <agruen>
Group administrator
Tue 25 Nov 2014 11:17:56 PM UTC, original submission:  

A patch with a very large line number will cause patch to crash. See attachmend.

I got this from this thread from openbsd:
http://marc.info/?l=openbsd-tech&m=141693055412785&w=2

While it seems bsd's patch and GNU patch are different codes the bug appears in both. valgrind output indicates this causes an out of bounds write, so it's likely security relevant.

Hanno Boeck <hanno>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

Attached Files
file #32545:  crash.patch added by hanno (65B - text/x-patch - crash.patch)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by agruen (Posted a comment)
  • -email is unavailable- added by hanno (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follow 3 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2014-11-30 agruen StatusNone Fixed
        Open/ClosedOpen Closed
    2014-11-25 hanno Attached File- Added crash.patch, #32545

    Back to the top

    Powered by Savane 3.13-4448.
    Corresponding source code