Vulnerability Development mailing list archives

Re: Bug in bash ?


From: "VeNoMouS" <venom () phreaker net>
Date: Tue, 13 Nov 2001 06:27:55 +1300

logs out on bash 1.14.7(1)

how ever I did notice that when you do bash -version

then excute say
ls `perl -e 'print "/*%s"x9000'`

but the odd thing is when u gdb the core it says it was generated by
`bash -version'

to tired to look into this any further its 6:27am

----- Original Message -----
From: "Caiaphas Pechorin" <caiaphas () operamail com>
To: <vuln-dev () securityfocus com>
Sent: Monday, November 12, 2001 8:01 PM
Subject: Re: Bug in bash ?


Steve Micallef scripsit (Nov 12, 2001 11:40am +1100):

What version of bash are you running? And on what OS?

Regards,

Steve Micallef

fwiw, I get the same on Debian Potato
GNU bash, version 2.03.0(1)-release (i386-pc-linux-gnu)

zsh 3.1.9-dev-6 (i686-pc-linux-gnu) just gives a 'File name too long'
error

On Sun, 11 Nov 2001, Patryk Chmielewski wrote:

When I was runnig some programs like vi or mpg123 with parameter with
many
"%s/*" i have strange results fe.
argv@jaskinia:~$ mpg123 `perl -e 'print "/*%s"x9000'`
[now i'm seeing prompt to login]

As you can see after this command shell (bash) is exiting.
It's don't work under tcsh and csh:

tcsh:
mpg123 `perl -e 'print "/*%s"x9000'`
Word too long.


csh:
%mpg123 `perl -e 'print "/*%s"x9000'`
Word too long.
%

I don't tried it under other shells.

--
-=[  Patryk Chmielewski   -> :: <-   argv () jaskinia eu org  ]=-
-=[   ******      http://argv.jaskinia.eu.org     ******   ]=-
-=[ "If you lie to the compiler, it will get its revenge." ]=-







Current thread: