Re: Vi buffer overflow

[Rob Paisley <rsp5870 () cs rit edu>]

Funny -

OpenBSD 2.9 is aok!

spiff:usr {102} uname -a
OpenBSD spiff 2.9 GENERIC#1 i386
spiff:usr {103} vi `perl -e 'print "A" x 9000'`

returns a screen like this:


~
~
~
~
~
~
~
~
~
~
... AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA: new file: line 1


I shortened it for effect.  Pretty obvious vi is FINE on OpenBSD 2.9
-Rob

On Tue, 6 Nov 2001, KF wrote:

> Date: Tue, 06 Nov 2001 17:22:07 -0500
> From: KF <dotslash () snosoft com>
> To: vuln-dev () security-focus com, recon () snosoft com
> Subject: Vi buffer overflow
>
> Not sure how big of a deal either of these are due to the fact that they
> are not suid... any thoughts?
>
> # vi `perl -e 'print "A" x 9000'`
> Memory fault - core dumped
>
> # du `perl -e 'print "A" x 9000'`
> Memory fault - core dumped
>
>
> # uname -a
> SCO_SV scosysv 3.2 5.0.6 i386
>
> -KF