bugGNU patch - Bugs: bug #43700, patch with large line number...

 
 

bug #43700: patch with large line number crashes

Submitted by:  Hanno Boeck <hanno>
Submitted on:  Tue Nov 25 23:17:56 2014  
 
Category: NoneSeverity: 3 - Normal
Item Group: NoneStatus: Fixed
Privacy: PublicAssigned to: None
Open/Closed: Closed

Add a New Comment (Rich MarkupRich Markup):
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Sun Nov 30 21:46:22 2014, comment #1:

Thanks, this is fixed in commit 7a988615.

Andreas Gruenbacher <agruen>
Project Administrator
Tue Nov 25 23:17:56 2014, original submission:

A patch with a very large line number will cause patch to crash. See attachmend.

I got this from this thread from openbsd:
http://marc.info/?l=openbsd-tech&m=141693055412785&w=2

While it seems bsd's patch and GNU patch are different codes the bug appears in both. valgrind output indicates this causes an out of bounds write, so it's likely security relevant.

Hanno Boeck <hanno>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

Attached Files
file #32545:  crash.patch added by hanno (65B - text/x-patch - crash.patch)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by agruen (Posted a comment)
  • -unavailable- added by hanno (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 3 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Sun Nov 30 21:46:22 2014agruenStatusNone=>Fixed
      Open/ClosedOpen=>Closed
    Tue Nov 25 23:17:56 2014hannoAttached File-=>Added crash.patch, #32545

    Back to the top


    Powered by Savane 3.1-cleanup1