Vulnerability Development mailing list archives

Re: Buffer overflow in awk


From: JW <jw () centraltexasit com>
Date: Tue, 26 Mar 2002 12:23:00 -0600

Doesn't work for me on SuSE 7.3... see below

At 01:30 PM 3/15/2002 -0300, you wrote:
A buffer overflow exist in awk(named awk on most 
systems, but actualy is gawk/GNU awk) when calling 
the -f option, to include an awk script, and supplying a 
filename with a buffer length of 1022 and up. 
[root@neural keoki]# awk -f `perl -e 'print "A" x 1022'` 
awk: fatal error: internal error 
Abort (core dumped)

jw@suse3:~> awk --version
GNU Awk 3.1.0


jw@suse3:~> awk -f `perl -e 'print "A" x 1022'` 
awk: fatal: can't open source file `AAAAAAAAAAAAAAAAAAAAAAAAA
<snip many AAAs>
AAAAA' for reading (File name too long)


jw@suse3:~>  uname -srm;awk -W version|head -1;awk -f `perl -e 'printf "A" x 8177'`;

Same error: <snip> AAAAA' for reading (File name too long) 

No seg fault.

----------------------------------------------------
Jonathan Wilson
System Administrator
Clickpatrol.com
Cedar Creek Software     http://www.cedarcreeksoftware.com


Current thread: