Hello Jim,
  
  Thanks again for the prompt confirmation of our previous bug reports.
We found a new bug in md5sum, due to a buffer underflow.  Here is an
example that seg faults on my machine:

  $ md5sum -c -- md5sum_bug.txt 
  Segmentation fault

  The file md5sum_bug.txt is attached to this message.

  The bug (or at least the proximate cause) seems to be in function
bsd_split_3 (md5sum.c:213):
          i = s_len - 1;
          while (i && s[i] != ')')
              i--;

  which when called with s_len=0, "underflows" string s.

  Thanks,
  Cristian

                MD5 (
_______________________________________________
Bug-coreutils mailing list
[email protected]
http://lists.gnu.org/mailman/listinfo/bug-coreutils

Reply via email to