Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Wed, 26 Nov 2014 00:28:05 +0100
From: Hanno Böck <hanno@...eck.de>
To: oss-security@...ts.openwall.com
Cc: Tobias Stoeckmann <tobias@...eckmann.org>
Subject: OpenBSD patch issue also affects GNU patch

Hi,

I saw this
http://marc.info/?l=openbsd-tech&m=141693055412785&w=2

And thought "let's try this on GNU patch on my linux sys".

And bang... segfault.

I don't know if this is a random coincidence or if gnu patch and
openbsd patch share some common ancestor code (haven't checked details).

valgrind output indicates this is an oob write issue:
==22957== Invalid write of size 1
==22957==    at 0x40904A: another_hunk (pch.c:1902)
==22957==    by 0x40304E: main (patch.c:366)
==22957==  Address 0x80000000051d3b82 is not stack'd, malloc'd or
(recently) free'd


Reported upstream:
https://savannah.gnu.org/bugs/?43700

cu,
-- 
Hanno Böck
http://hboeck.de/

mail/jabber: hanno@...eck.de
GPG: BBB51E42

Content of type "application/pgp-signature" skipped

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.