Vulnerability Development mailing list archives

Re: vi buffer overflow


From: Matias Sedalo <s0t4ipv6 () shellcode com ar>
Date: Fri, 9 Nov 2001 12:22:16 -0300 (ARST)

linux slackware 7.1, VIM - version 5.8.3

c0d4:~$ vim `perl -e 'print "A" x 9000'`
vim: Symbol `ospeed' has different size in shared object, consider 
re-linking
Vim: Double signal, exiting
c0d4:~$ uname -a
Linux c0d4 2.2.19 #7 Wed Nov 7 06:54:37 ARST 2001 i586 unknown


Matias Sedalo.
..........................................................
Key id          : 0x1F5345B7
Key fingerprint : B7A1 B45E 4906 34BD  70A1 55F8 E5A0 BCA2
..........................................................

On Fri, 9 Nov 2001, Emmanuel BENOIT wrote:

It seems that this bug has been fixed with vim 6.0 (even in alpha versions) :

tseeker@abboth:~$ uname -a
Linux abboth 2.4.10 #1 Wed Oct 3 13:58:10 CEST 2001 i686 unknown
tseeker@abboth:~$ vim --version
VIM - Vi IMproved 6.0y ALPHA (2001 Mar 18, compiled Aug  6 2001 22:24:10)
[...]
tseeker@abboth:~$ vim `perl -e 'print "A" x 9000'`
[ The editors opens with 'Illegal file name' in its status line ]

Kaneda Akira wrote:
on Redhat 7.0 (VIM 5.7.8)
# vi `perl -e 'print "A" x 9000'`
Vim: Caught deadly signal SEGV
Vim: Finished.
Segmentation fault (core dumped)
# uname -a
Linux riven 2.2.16-22 #1 Tue Aug 22 16:49:06 EDT 2000 i686 unknown
#



Current thread: