Path: csiph.com!weretis.net!feeder6.news.weretis.net!nntp.club.cc.cmu.edu!micro-heart-of-gold.mit.edu!bloom-beacon.mit.edu!bloom-beacon.mit.edu!171.64.64.130.MISMATCH!usenet.stanford.edu!not-for-mail From: Petr Pisar Newsgroups: gnu.utils.bug Subject: Re: Vulnerability Report on Sharutils 4.15.2 Date: Tue, 10 Apr 2018 14:54:32 +0000 (UTC) Lines: 18 Approved: bug-gnu-utils@gnu.org Message-ID: References: <47a93dc0-b0f9-9dc7-593e-ce7f96f56e19@gmail.com> <20180325175147.GA13587@eldamar.local> <20180326044616.f4aouw6a2k5px4jq@lorien.valinor.li> <20180406042611.GA3637@eldamar.local> NNTP-Posting-Host: lists.gnu.org X-Trace: usenet.stanford.edu 1523372567 25976 208.118.235.17 (10 Apr 2018 15:02:47 GMT) X-Complaints-To: action@cs.stanford.edu To: bug-gnu-utils@gnu.org Envelope-to: bug-gnu-utils@gnu.org X-Injected-Via-Gmane: http://gmane.org/ User-Agent: slrn/1.0.3 (Linux) X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] [fuzzy] X-Received-From: 195.159.176.226 X-Mailman-Approved-At: Tue, 10 Apr 2018 11:02:45 -0400 X-BeenThere: bug-gnu-utils@gnu.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: Bug reports for the GNU utilities List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Xref: csiph.com gnu.utils.bug:2240 On 2018-04-06, Salvatore Bonaccorso wrote: > AFAICT for this issue still no proposed fix is available for the > issues raised in > https://lists.gnu.org/archive/html/bug-gnu-utils/2018-02/msg00003.html, Well, I cannot reproduce it. Maybe the attachent with the reproducer is wrong. The message reads 2.fuzz, but the attachent contains four SIGSEGV*.fuzz files. Runnning unshar on any of them results in: sh: line 14386: warning: here-document at line 37 delimited by end-of-file (wanted `_EOF_') sh: line 14387: syntax error: unexpected end of file (the line numbers differ) and valgrdind does not show any issue in the unshar process. -- Petr