This bug was fixed in the package gvfs - 1.38.1-1ubuntu2
---------------
gvfs (1.38.1-1ubuntu2) disco; urgency=medium
* d/p/common-Prevent-crashes-on-invalid-autorun-file.patch:
- common: Prevent crashes on invalid autorun file (lp: #1798725)
-- Sebastien Bacher <[email protected]> Tue, 13 Nov 2018 22:18:59
+0100
** Changed in: gvfs (Ubuntu)
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gvfs in Ubuntu.
https://bugs.launchpad.net/bugs/1798725
Title:
gvfs may crash when parsing non-valid UTF8 in autorun.inf
Status in gvfs package in Ubuntu:
Fix Released
Bug description:
* Impact
gvfs can be made to segfault by being provided an invalid autorun.inf
* Test Case
Use the proof of concept from bellow to generate an invalid
autorun.inf and place it on an usb drive, connect the drive to the
computer, gvfs shouldn't hit a segfault
* Regression potential
Check that the autorun feature keeps working
-----------------------
Reported upstream at https://bugs.exim.org/show_bug.cgi?id=2330 -
libpcre3 can be made to crash when matching the pattern \s*= when the
context is n\xff=
Able to reproduce on current Bionic using the PoC attached (which is
copied directly from the upstream bug report) - in a fresh Bionic VM:
$ sudo apt install build-essential libgtk2.0-dev
$ cd PCRE_PoC
$ ./compilePoC.sh
$ ./PoC
Content:
-------------------
n�=
-------------------
Pattern:
-------------------
\s*=
---------------------
Segmentation fault (core dumped)
Haven't yet tested the second PoC via an external disk autorun.inf and
gvfs-udisks2-volume-monitor.
Also haven't tested in Cosmic / older releases
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gvfs/+bug/1798725/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp
