tags 462224 confirmed upstream
forwarded 462224 https://savannah.gnu.org/bugs/?20751
# present in 4.2.31 to 4.3.8 afaict.
found 462224 4.2.31-1
close 462224 4.3.11-1
thanks

On 2008-01-23 Wouter Verhelst <[EMAIL PROTECTED]> wrote:
> Package: findutils
> Version: 4.2.31-4
> Severity: important

> Hi,

> The first line in the function list_file() in file lib/listfile.c looks
> as follows:

>   char modebuf[11];

> This variable is then passed on to a function strmode:

>   strmode (statp->st_mode, modebuf);

> That function is found in gnulib/lib/filemode.c, and contains the
> following (amongst others):

> void
> strmode (mode_t mode, char *str)
> {
> [...]
>   str[11] = '\0';
> }

> This call is off by one, resulting in stack corruption. On m68k, the
> overwritten data is the frame pointer of list_file()'s calling function,
> resulting in a segfault when list_file tries to restore that frame
> pointer to the right register.
[...]

Hello,

thank you for the detailed report. I will try to make an upload either
cherrypicking the respective patch from upstream's CVS or using the
4.2.32 release candidate.
http://news.gmane.org/find-root.php?message_id=%3cc5df85930712080859pb058980rf7f4278f178cf0a4%40mail.gmail.com%3e

cu andreas
-- 
`What a good friend you are to him, Dr. Maturin. His other friends are
so grateful to you.'
`I sew his ears on from time to time, sure'



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to