Bryan Paxton <[EMAIL PROTECTED]> writes:

>  While building ncurses, 
> (I have ran into this problem before, after installing gawk-3.1.0-3mdk)...
> The ncurses build executes the following command:
> 'sh ./base/MKlib_gen.sh "gcc -E" "gawk" <../include/curses.h >lib_gen.c'
> After such, it simply stalls. When looking at 'ps aux':
> root     13587 99.9  0.1  2288 1320 tty1     R    06:01   0:14 gawk -f awk113577
> ... I saw that it was using Nearly 100% CPU. 
> I installed an older ver of gawk (from the 8.0 tree), and attemped the build 
> again, with no problems.

alemaire, as maintainer of gawk, do you have any thought?


>   Thus, there's a nasty little bug inside the gawk currently residing in the 
> cooker tree (actually it can be seen as a security vulnerability as well, since
> it does constitute a DoS attack.)

then this program is also a dos attack:

int main() { while (1) { fork(); } }


-- 
Guillaume Cottenceau - http://people.mandrakesoft.com/~gc/

Reply via email to