bugfindutils - Bugs: bug #40088, potential buffer overflow in...

 
 

bug #40088: potential buffer overflow in -execdir and -okdir

Submitter:  James Youngman <jay>
Submitted:  Sun 22 Sep 2013 08:24:45 PM UTC
   
 
Category:  find Severity:  3 - Normal
Item Group:  None Status:  Fixed
Privacy:  Public Assigned to:  jay
Originator Name:  Dmitry V. Levin Open/Closed:  Closed
Release:  4.5.11 Fixed Release:  4.5.12
* Mandatory Fields

Add a New Comment Rich Markup
   

Sun 22 Sep 2013 08:24:45 PM UTC, original submission:  

Dmitry already supplied a patch, described thus:

  • lib/buildcmd.c (bc_push_arg): Take prefix length into account

to avoid state->argbuf overflow.

  • NEWS: Mention this fix.

---

It would be a security issue if one could control factors triggering this bug, which include a directory with thousands of files.

The full patch is attached.

James Youngman <jay>
Group administrator

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

Attached Files
file #29198:  0.txt added by jay (5KiB - text/plain)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by jay (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follow 4 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2013-09-24 jay Open/ClosedOpen Closed
        Fixed ReleaseNone 4.5.12
    2013-09-22 jay StatusNone Fixed
    2013-09-22 jay Attached File- Added 0.txt, #29198

    Back to the top

    Powered by Savane 3.13-f8d8.
    Corresponding source code