bugfindutils - Bugs: bug #40088, potential buffer overflow in...

 
 

bug #40088: potential buffer overflow in -execdir and -okdir

Submitted by:  James Youngman <jay>
Submitted on:  Sun 22 Sep 2013 08:24:45 PM UTC  
 
Category: findSeverity: 3 - Normal
Item Group: NoneStatus: Fixed
Privacy: PublicAssigned to: James Youngman <jay>
Originator Name: Dmitry V. LevinOpen/Closed: Closed
Release: 4.5.11Fixed Release: 4.5.12

Add a New Comment(Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Sun 22 Sep 2013 08:24:45 PM UTC, original submission:

Dmitry already supplied a patch, described thus:

  • lib/buildcmd.c (bc_push_arg): Take prefix length into account

to avoid state->argbuf overflow.

  • NEWS: Mention this fix.

---

It would be a security issue if one could control factors triggering this bug, which include a directory with thousands of files.

The full patch is attached.

James Youngman <jay>
Project AdministratorIn charge of this item.

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

Attached Files
file #29198:  0.txt added by jay (5KiB - text/plain)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by jay (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 4 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Tue 24 Sep 2013 10:03:52 PM UTCjayOpen/ClosedOpen=>Closed
      Fixed ReleaseNone=>4.5.12
    Sun 22 Sep 2013 09:12:00 PM UTCjayStatusNone=>Fixed
    Sun 22 Sep 2013 08:24:45 PM UTCjayAttached File-=>Added 0.txt, #29198

    Back to the top


    Powered by Savane 3.1-cleanup1