bugGNU gettext - Bugs: bug #45408, malformed input causes endless...


You are not allowed to post comments on this tracker with your current authentication level.

bug #45408: malformed input causes endless loop in xgettext -L shell

Submitted by:  Hanno Boeck <hanno>
Submitted on:  Thu 25 Jun 2015 03:13:46 PM UTC  
Category: ShellSeverity: 3 - Normal
Item Group: NoneStatus: None
Privacy: PublicAssigned to: None
Open/Closed: Open

Fri 26 Jun 2015 07:11:20 AM UTC, comment #2:

Perhaps the attached patch might be sufficient.

(file #34325)

Daiki Ueno <ueno>
Project Administrator
Fri 26 Jun 2015 02:52:14 AM UTC, comment #1:

I'm not familiar with this part, but most of (or all?) xgettext scanners assume that the input is syntactically correct, as suggested in comments: "we assume a syntactically correct input file anyway".

The shell scanner indeed does not care the case where unbalanced expressions within a balanced expression.

Daiki Ueno <ueno>
Project Administrator
Thu 25 Jun 2015 03:13:46 PM UTC, original submission:

The attached file will generate an endless loop in xgettext in shell mode. Test with
xgettext -L shell [input]

Found with american fuzzy lop.

Hanno Boeck <hanno>


Attached Files
file #34317:  xgettext-shell-loop added by hanno (5B - application/octet-stream - endless loop input)


Depends on the following items: None found

Items that depend on this one: None found


Carbon-Copy List
  • -unavailable- added by haible (Updated the item)
  • -unavailable- added by ueno (Posted a comment)
  • -unavailable- added by hanno (Submitted the item)

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.


    Please enter the title of George Orwell's famous dystopian book (it's a date):



    Follow 3 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Sun 27 Nov 2016 12:06:04 PM UTChaibleCategoryNone=>Shell
    Fri 26 Jun 2015 07:11:20 AM UTCuenoAttached File-=>Added 0001-xgettext-Proof-against-unterminated.patch, #34325
    Thu 25 Jun 2015 03:13:46 PM UTChannoAttached File-=>Added xgettext-shell-loop, #34317

    Back to the top

    Powered by Savane 3.1-cleanup1