mainThe GNU Bourne-Again SHell - Support: sr #109656, Bash segfaults for long unicode...

 
 

sr #109656: Bash segfaults for long unicode pathnames

Submitter:  None
Submitted:  Fri 15 Mar 2019 09:14:43 AM UTC
   
 
Category:  None Priority:  5 - Normal
Severity:  6 - Security Status:  Works For Me
Privacy:  Public Assigned to:  None
Originator Email:  -email is unavailable- Open/Closed:  Open
Operating System:  GNU/Linux
* Mandatory Fields

Add a New Comment Rich Markup
   

Thu 21 Mar 2019 12:06:12 PM UTC, comment #2: 

works for me  4.4.19(1)-release (x86_64-pc-linux-gnu)

J <now3d>
Wed 20 Mar 2019 07:50:43 PM UTC, comment #1: 

I can't reproduce this with bash-5.0 or bash-4.4. It's probably dependent on your prompt.

Chet Ramey <chet>
Group administrator
Fri 15 Mar 2019 09:14:43 AM UTC, original submission:  

Upon CD'ing to a directory with a certain kind of absolute pathname, bash segfaults.

As far as I can tell, the criteria is that it's 145 or more bytes with a unicode character in it, but that could be wrong.

Here is an example of a minimally-sized absolute pathname that triggers the bug:

/0000000000/1111111111/2222222222/3333333333/4444444444/—/5555555555/6666666666/7777777777/8888888888/9999999999/XXXXXXXXXX/YYYYYYYYYY/ZZZZZZZZ

(mkdir -p for this works, though)

My greatest concern is that this is triggering some potentially-security relevant buffer overflow bug!

Anonymous

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by now3d (Posted a comment)
  • -email is unavailable- added by chet (Posted a comment)
  • -email is unavailable- added by None (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follows 1 latest change.

    Date Changed by Updated Field Previous Value => Replaced by
    2019-03-20 chet StatusNone Works For Me

    Back to the top

    Powered by Savane 3.13-3230.
    Corresponding source code