On Ubuntu 16.04 TLS I have been injecting /dev/urandom data into
commands via bash. I consistently get heap crashes in info.

It takes about 400M of regular user data to get the crash. To date I
have not isolated the random string section that cause the crash.

Simple attack example:

dd if=/dev/urandom | info 2> error.txt

* urandom has extra seeding
* Ubuntu is running in Virtualbox Version 5.2.8 r121009 (Qt5.6.2) on
Win 8.1,which is not memory constrained.

Hope this helps

Jeff M

IT Services

Reply via email to