[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: info command segmentation fault
|
From: |
Gavin Smith |
|
Subject: |
Re: info command segmentation fault |
|
Date: |
Wed, 12 Aug 2015 17:00:34 +0100 |
On 8 August 2015 at 16:17, Sergey Poznyakoff <address@hidden> wrote:
> Ivan Pacheco <address@hidden> ha escrit:
>> Hi. Just by curiosity I found a segfault inside the command info. If used
>> well it can be a serious vulnerability.
>>
>> Command:
>>
>> $ info -k l
>
> That happens due to a malformed dir entry, e.g.:
>
> * gdbm_dump: gdbm_dump(gdbm).
>
> The resulting reference entry contails filename=NULL, which causes
> coredump. The fix for this particular problem is attached.
>
Thanks for tracking it down, it should be fixed now.