Vulnerability Development mailing list archives

Re: Bash Blues.


From: "Roland Postle" <mail () blazde co uk>
Date: Thu, 13 Feb 2003 17:34:36 +0000

During some work, I noticed GNU bash could be crashed by sending a 
malformed perl request to the terminal.

      example:        `perl -e 'print "*/*" x 3500'`
                      <bash crashes>

It's a stack overflow, due to glob_filename (in glob.c) recursively
calling itself while parsing the filename. So probably not exploitable.

- Blazde


Current thread: