On 8 August 2015 at 16:17, Sergey Poznyakoff <[email protected]> wrote:
> Ivan Pacheco <[email protected]> ha escrit:
>> Hi. Just by curiosity I found a segfault inside the command info. If used
>> well it can be a serious vulnerability.
>>
>> Command:
>>
>> $ info -k l
>
> That happens due to a malformed dir entry, e.g.:
>
> * gdbm_dump: gdbm_dump(gdbm).
>
> The resulting reference entry contails filename=NULL, which causes
> coredump. The fix for this particular problem is attached.
>
Thanks for tracking it down, it should be fixed now.
