Re: GNU ed heap overflow

[Florian Weimer <fw () deneb enyo de>]

* Tavis Ormandy:

> If you can specify an arbitrary filename, can't you execute commands
> anyway?
>
> $ ed '!ls>&2'
> bin   dev  home  lost+found  misc  net  proc  sbin     srv  tmp  var
> boot  etc  lib   media       mnt   opt  root  selinux  sys  usr
> 0

Interesting.  But this type of command execution is not possible with
"red", which suffers from the same overflow.