Re: Can anyone verify a core dump on /sbin/mingetty

[Pedro Miller Rabinovitch <pedro () ciphertech com br>]

Scott,

  that's a positive on RH 7.2, 7.0, and LinuxPPC Q4 dist. Good find.

  core dump:

#0  0x400748cf in _IO_vfprintf (s=0xbfffd3c0, format=0x8049928 "%s: %s", 
    ap=0xbfffd5ac) at ../sysdeps/i386/bits/string.h:343
#1  0x4008ea68 in _IO_vsprintf (
    string=0xbfffd490 "/dev/", 'A' <repeats 195 times>..., 
    format=0x8049928 "%s: %s", args=0xbfffd5a4) at iovsprintf.c:49
#2  0x08048f96 in alarm ()
#3  0x41414141 in ?? ()
Cannot access memory at address 0x41414141

        Pedro.


On Mon, 3 Dec 2001 14:46:31 +0000
smackenz <smackenz () brad ac uk> wrote:

> *nix Issue - Anyone with 'mingetty':
>
> After all the vi overflows, and wu-ftpd etc recently I thought I would have a 
> sniff around a default redhat 7.1 box too see what I could find.  Anyway I  
> managed to dump core on /sbin/mingetty and thought it would be worth 
> reporting:
>
> See below for the shell out:
>
>
> [m0le@mainframe m0le]$ /sbin/mingetty `perl -e 'print "A"x9000'`
> Segmentation fault (core dumped)
> [m0le@mainframe m0le]$ id
> uid=500(m0le) gid=500(m0le) groups=500(m0le)
>
> (standard user account)
>
>
> This only works by doing this:
>
> /sbin/mingetty `perl -e 'print "A"x9000'`
>
> when I did the following:
>
> [m0le@mainframe m0le]$ cd /sbin
> [m0le@mainframe /sbin]$ ./mingetty `perl -e 'print "A"x9000'`
> Segmentation fault
> [m0le@mainframe /sbin]$ 
>
> No core dump....  It doesn't seem to dump in the sbin directory, however I've 
> successfully dumped from several other dir's.
>
> I am running a RedHat7.1.  I would appreciate some feedback from other 
> distros whith mingetty running.
>
> Thanks
>
> Scott Mackenzie.
>
>
>    


-- 
Pedro Miller Rabinovitch
Diretoria de Tecnologia
Cipher Technology
http://www.ciphertech.com.br

______
"Segurança em TI - uma especialidade Cipher Technology"