Bugtraq mailing list archives

tcsh/Solaris (Re: More telnet Daemon Fun)


From: pir () SHORE NET (Peter Radcliffe)
Date: Wed, 3 Dec 1997 11:26:11 -0500


Aaron Campbell <aaron () ug cs dal ca> probably said:
Regarding user-supplied terminfo files...

Lastly, while doing some testing, I discovered that setting my TERM
variable to a 256-character string under Solaris 2.5.1 caused my bash
shell session to crash, dump core and log me out. This may or may not have
been mentioned on Bugtraq before, and may or may not be due to missing
patches.

tcsh:

pir@foo> uname -a
SunOS foo 5.6 Generic sun4m sparc SUNW,SPARCstation-5
pir@foo> setenv TERM "1234567890123456789012345678901234567890123456789012
34567890123456789012345678901234567890123456789012345678901234567890123456
78901234567890123456789012345678901234567890123456789012345645678901234567
89012345678901234567890123456789012345678901234567890123456789"
tcsh: using dumb terminal settings.
Bus error (core dumped)

pir@bar> uname -a
SunOS bar 5.5.1 Generic_103640-12 sun4m sparc SUNW,SPARCstation-10
pir@bar> setenv TERM "1234567890123456789012345678901234567890123456789012
34567890123456789012345678901234567890123456789012345678901234567890123456
78901234567890123456789012345678901234567890123456789012345645678901234567
89012345678901234567890123456789012345678901234567890123456789"
tcsh: using dumb terminal settings.
Bus error (core dumped)

As far as I know, these two machines are up to date in all relavant patches.

2.6:
sigprocmask(SIG_BLOCK, 0xEFFFBDE0, 0x00000000)  = 0
open("/usr/share/lib/terminfo/1/1234567890123456789012345678901234567890
123456789012345678901234567890123456789012345678901234567890123456789012
345678901234567890123456789012345678901234567890123456789012345678901234
564567890123456789012345678901234567890123456789012345678901234567890123
456789", O_RDONLY) Err#78 ENAMETOOLONG
access("/usr/share/lib/terminfo/.", 0)          = 0
tcsh: using dumb terminal settings.
write(1, " t c s h :   u s i n g  ".., 36)      = 36
ioctl(16, TIOCGWINSZ, 0xEFFFBDD8)               = 0
sigprocmask(SIG_UNBLOCK, 0xEFFFBDE0, 0x00000000) = 0
close(0)                                        = 0
close(1)                                        = 0
close(2)                                        = 0
open("/dev/null", O_RDONLY)                     = 0
fcntl(0, F_DUP2FD, 0x00000001)                  = 1
fcntl(0, F_DUP2FD, 0x00000002)                  = 2
sigprocmask(SIG_BLOCK, 0xEFFFE8D8, 0x00000000)  = 0
ioctl(16, TIOCGWINSZ, 0xEFFFE8D0)               = 0
sigprocmask(SIG_UNBLOCK, 0xEFFFE8D8, 0x00000000) = 0
sigprocmask(SIG_UNBLOCK, 0xEFFFE9C0, 0x00000000) = 0
    Incurred fault #5, FLTACCESS  %pc = 0x00035DB8
      siginfo: SIGBUS BUS_ADRALN addr=0x3334353A
    Received signal #10, SIGBUS [default]
      siginfo: SIGBUS BUS_ADRALN addr=0x3334353A
        *** process killed ***

bash 2.01 on 2.6 or 2.5.1 seems to cope with this just fine.
Whos the tcsh maintaner these days :)

P.

--
Peter Radcliffe   |   pir () shore net   |   Shore.net systems administrator.



Current thread: