Re: Heap-buffer-overflow in valid_parameter_transform

2022-08-31 Thread Chet Ramey
On 8/31/22 3:34 PM, Ivan Kapranov wrote: Are you sure? The patch i have attached fixes a buffer overflow if the xform is a single character string. The xform is always a single-character string. xform[1] had better be the '\0' that terminates it. If it's not, the xform is invalid. Nothing

Re: Heap-buffer-overflow in valid_parameter_transform

2022-08-31 Thread Ivan Kapranov
Are you sure? The patch i have attached fixes a buffer overflow if the xform is a single character string. 31.08.2022, 22:26, "Chet Ramey" : On 8/30/22 1:02 PM, Иван Капранов wrote: Configuration Information [Automatically generated, do not change]:

Re: Heap-buffer-overflow in valid_parameter_transform

2022-08-31 Thread Chet Ramey
On 8/30/22 1:02 PM, Иван Капранов wrote: Configuration Information [Automatically generated, do not change]: Machine: x86_64 OS: linux-gnu Compiler: gcc Compilation CFLAGS: -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall

Re: Heap-buffer-overflow in valid_parameter_transform

2022-08-31 Thread Chet Ramey
On 8/30/22 1:02 PM, Иван Капранов wrote: Repeat-By: 1. Build bash with asan 2. Run with AFL++ crafted input (in attachment) There's no attachment. -- ``The lyf so short, the craft so long to lerne.'' - Chaucer ``Ars longa, vita brevis'' - Hippocrates Chet Ramey,