Vulnerability Development mailing list archives

wget core dumps


From: KF <dotslash () snosoft com>
Date: Tue, 25 Dec 2001 15:27:32 -0500

I was compiling something today and when it went to go get support libraries I noticed a possible buffer overflow... My powerpc processor tends to obscure weather or not I can overwrite things and I have had too much egnog tonight...
so can someone else check this out.

[root@linuxppc ]#  make
download libbf-0.8.2b.tar.gz
wget --passive-ftp ftp://sunsite.doc.ic.ac.uk/Mirrors/ftp.psy.uq.oz.au/pub/Crypto/libeay/libbf-0.8.2b.tar.gz
make: *** [libbf-0.8.2b.tar.gz] Segmentation fault (core dumped)
[root@linuxppc ]# wget --passive-ftp ftp://sunsite.doc.ic.ac.uk/Mirrors/ftp.psy.uq.oz.au/pub/Crypto/libeay/libbf-0.8.2b.tar.gz
Segmentation fault (core dumped)

[root@linuxppc ]# wget `perl -e 'print "A" x 9000'`
Segmentation fault (core dumped)
[root@linuxppc ]# gdb -q wget core
(no debugging symbols found)...
Core was generated by `wget AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA'.
Program terminated with signal 11, Segmentation fault.
Reading symbols from /usr/lib/libssl.so.0...(no debugging symbols found)...done.
Loaded symbols for /usr/lib/libssl.so.0
Reading symbols from /usr/lib/libcrypto.so.0...(no debugging symbols found)...done.
Loaded symbols for /usr/lib/libcrypto.so.0
Reading symbols from /lib/libc.so.6...(no debugging symbols found)...done.
Loaded symbols for /lib/libc.so.6
Reading symbols from /lib/ld.so.1...done.
Loaded symbols for /lib/ld.so.1
#0  0x0fdb6090 in strlen () from /lib/libc.so.6
(gdb) bt
#0  0x0fdb6090 in strlen () from /lib/libc.so.6
#1  0x0fd85bfc in vfprintf () from /lib/libc.so.6
#2  0x0fda6220 in vsnprintf () from /lib/libc.so.6
#3  0x1000f7f4 in fnmatch ()
#4  0x1000f968 in fnmatch ()
#5  0x1000bcec in fnmatch ()
#6  0x10014c08 in fnmatch ()
#7  0x10010d1c in fnmatch ()
#8  0x0fd52b90 in __libc_start_main () from /lib/libc.so.6

-KF


Current thread: