bugGNU gettext - Bugs: bug #45408, malformed input causes endless...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #45408: malformed input causes endless loop in xgettext -L shell

Submitted by:  Hanno Boeck <hanno>
Submitted on:  Thu 25 Jun 2015 03:13:46 PM UTC  
 
Category:  Shell Severity:  3 - Normal
Item Group:  None Status:  None
Privacy:  Public Assigned to:  None
Open/Closed:  Open

Fri 26 Jun 2015 07:11:20 AM UTC, comment #2:

Perhaps the attached patch might be sufficient.

(file #34325)

Daiki Ueno <ueno>
Project Administrator
Fri 26 Jun 2015 02:52:14 AM UTC, comment #1:

I'm not familiar with this part, but most of (or all?) xgettext scanners assume that the input is syntactically correct, as suggested in comments: "we assume a syntactically correct input file anyway".

The shell scanner indeed does not care the case where unbalanced expressions within a balanced expression.

Daiki Ueno <ueno>
Project Administrator
Thu 25 Jun 2015 03:13:46 PM UTC, original submission:

The attached file will generate an endless loop in xgettext in shell mode. Test with
xgettext -L shell [input]

Found with american fuzzy lop.

Hanno Boeck <hanno>

 

Attached Files
file #34317:  xgettext-shell-loop added by hanno (5B - application/octet-stream - endless loop input)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by haible (Updated the item)
  • -email is unavailable- added by ueno (Posted a comment)
  • -email is unavailable- added by hanno (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

     

     

    Follow 3 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2016-11-27 haible CategoryNone => Shell
    2015-06-26 ueno Attached File- => Added 0001-xgettext-Proof-against-unterminated.patch, #34325
    2015-06-25 hanno Attached File- => Added xgettext-shell-loop, #34317

    Back to the top


    Powered by Savane 3.3