This bug was fixed in the package gvfs - 1.38.1-0ubuntu1.1
---------------
gvfs (1.38.1-0ubuntu1.1) cosmic; urgency=medium
* debian/patches/series:
- include git_invalid_autorun.patch which was mentioned in
the previous upload but not added to the serie
gvfs (1.38.1-0ubuntu1) cosmic; urgency=medium
* New upstream version (lp: #1803186)
- smbbrowse: Force NT1 protocol version for workgroup support
(lp: #1778322)
* debian/patches/git_invalid_autorun.patch:
- common: Prevent crashes on invalid autorun file (lp: #1798725)
-- Sebastien Bacher <[email protected]> Wed, 21 Nov 2018 15:03:01
+0100
** Changed in: gvfs (Ubuntu Cosmic)
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gvfs in Ubuntu.
https://bugs.launchpad.net/bugs/1798725
Title:
gvfs may crash when parsing non-valid UTF8 in autorun.inf
Status in gvfs package in Ubuntu:
Fix Released
Status in gvfs source package in Bionic:
Fix Released
Status in gvfs source package in Cosmic:
Fix Released
Bug description:
* Impact
gvfs can be made to segfault by being provided an invalid autorun.inf
* Test Case
Use the proof of concept from bellow to generate an invalid
autorun.inf and place it on an usb drive, connect the drive to the
computer, gvfs shouldn't hit a segfault
* Regression potential
Check that the autorun feature keeps working
-----------------------
Reported upstream at https://bugs.exim.org/show_bug.cgi?id=2330 -
libpcre3 can be made to crash when matching the pattern \s*= when the
context is n\xff=
Able to reproduce on current Bionic using the PoC attached (which is
copied directly from the upstream bug report) - in a fresh Bionic VM:
$ sudo apt install build-essential libgtk2.0-dev
$ cd PCRE_PoC
$ ./compilePoC.sh
$ ./PoC
Content:
-------------------
n�=
-------------------
Pattern:
-------------------
\s*=
---------------------
Segmentation fault (core dumped)
Haven't yet tested the second PoC via an external disk autorun.inf and
gvfs-udisks2-volume-monitor.
Also haven't tested in Cosmic / older releases
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gvfs/+bug/1798725/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp
