Vulnerability Development mailing list archives

Re: possible stack flow in bash


From: Sebastian Jaenicke <tsa () jaenicke org>
Date: Sat, 29 Jun 2002 18:30:52 +0200

Hi,

On Fri, Jun 28, 2002 at 04:03:27PM +0000, Junior wrote:
Stack in bash stows observing possible.

Step 1 - bash-2.05a# ls "!x123456"
...exitexitexitexitexitexitexitexitexitexitexitexitexitexitexitexitexitexitexite
xitexitexitexitexitexitexitexitexitexitexitexitexitexitexitexitexitexitexitexite
xitexitexitexitexitexitexitexitexitexit"
bash: /bin/ls: Argument list too long

Step 2 - bash-2.05a# ls "!x123456"
...!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
bash: xrealloc: cannot reallocate 134322944 bytes (0 bytes allocated)

Welcome to Linux 2.4.18 (tty8)

I can't reproduce this on ROCK Linux with bash 2.05a:

[tsa@azathoth ~]$ echo $SHELL
/bin/bash
[tsa@azathoth ~]$ /bin/bash --version
GNU bash, version 2.05a.0(1)-release (i686-pc-linux-gnu)
Copyright 2001 Free Software Foundation, Inc.
[tsa@azathoth ~]$ ls "!x123456"
bash: !x123456: event not found
[tsa@azathoth ~]$ 

- Sebastian
-- 
Sebastian Jaenicke
whois pgpkey-18AC0BE4 -h whois.ripe.net|perl -ne's-^certif: +--&&print'
  "Object-oriented programming is an exceptionally bad idea which
   could only have originated in California." --Edsger Dijkstra  

Attachment: _bin
Description:


Current thread: