Re: Vulnerability Report on Sharutils 4.15.2

Path	csiph.com!weretis.net!feeder6.news.weretis.net!nntp.club.cc.cmu.edu!micro-heart-of-gold.mit.edu!bloom-beacon.mit.edu!bloom-beacon.mit.edu!171.64.64.130.MISMATCH!usenet.stanford.edu!not-for-mail
From	Petr Pisar <ppisar@redhat.com>
Newsgroups	gnu.utils.bug
Subject	Re: Vulnerability Report on Sharutils 4.15.2
Date	Tue, 10 Apr 2018 14:54:32 +0000 (UTC)
Lines	18
Approved	bug-gnu-utils@gnu.org
Message-ID	<mailman.11974.1523372567.27995.bug-gnu-utils@gnu.org> (permalink)
References	<47a93dc0-b0f9-9dc7-593e-ce7f96f56e19@gmail.com> <20180325175147.GA13587@eldamar.local> <CAFkjv+vMm9SB+U04_97D+To9DUaOBS2O6uLBxM1=PsPYGdn8qg@mail.gmail.com> <20180326044616.f4aouw6a2k5px4jq@lorien.valinor.li> <CAFkjv+vZgV6zbrhnLQDpJETZjMyajo05=r+wtqZ6BvtgjV7=xg@mail.gmail.com> <20180406042611.GA3637@eldamar.local>
NNTP-Posting-Host	lists.gnu.org
X-Trace	usenet.stanford.edu 1523372567 25976 208.118.235.17 (10 Apr 2018 15:02:47 GMT)
X-Complaints-To	action@cs.stanford.edu
To	bug-gnu-utils@gnu.org
Envelope-to	bug-gnu-utils@gnu.org
X-Injected-Via-Gmane	http://gmane.org/
User-Agent	slrn/1.0.3 (Linux)
X-detected-operating-system	by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] [fuzzy]
X-Received-From	195.159.176.226
X-Mailman-Approved-At	Tue, 10 Apr 2018 11:02:45 -0400
X-BeenThere	bug-gnu-utils@gnu.org
X-Mailman-Version	2.1.21
Precedence	list
List-Id	Bug reports for the GNU utilities <bug-gnu-utils.gnu.org>
List-Unsubscribe	<https://lists.gnu.org/mailman/options/bug-gnu-utils>, <mailto:bug-gnu-utils-request@gnu.org?subject=unsubscribe>
List-Archive	<http://lists.gnu.org/archive/html/bug-gnu-utils/>
List-Post	<mailto:bug-gnu-utils@gnu.org>
List-Help	<mailto:bug-gnu-utils-request@gnu.org?subject=help>
List-Subscribe	<https://lists.gnu.org/mailman/listinfo/bug-gnu-utils>, <mailto:bug-gnu-utils-request@gnu.org?subject=subscribe>
Xref	csiph.com gnu.utils.bug:2240

Show key headers only | View raw

On 2018-04-06, Salvatore Bonaccorso <carnil@debian.org> wrote:
> AFAICT for this issue still no proposed fix is available for the
> issues raised in
> https://lists.gnu.org/archive/html/bug-gnu-utils/2018-02/msg00003.html,

Well, I cannot reproduce it. Maybe the attachent with the reproducer is
wrong. The message reads 2.fuzz, but the attachent contains four
SIGSEGV*.fuzz files. Runnning unshar on any of them results in:

sh: line 14386: warning: here-document at line 37 delimited by end-of-file (wanted `_EOF_')
sh: line 14387: syntax error: unexpected end of file

(the line numbers differ) and valgrdind does not show any issue in the
unshar process.

-- Petr

Back to gnu.utils.bug | Previous | Next | Find similar

Thread

Re: Vulnerability Report on Sharutils 4.15.2 Petr Pisar <ppisar@redhat.com> - 2018-04-10 14:54 +0000

csiph-web