GNU bug report logs - #19563
grep -F: fix a heap buffer (read) overrun

Previous Next

Full log

Message #14 received at 19563 <at> debbugs.gnu.org (full text, mbox):

From: Norihiro Tanaka <noritnk <at> kcn.ne.jp>
To: Jim Meyering <jim <at> meyering.net>
Cc: 19563 <at> debbugs.gnu.org, Yuliy Pisetsky <ypisetsky <at> fb.com>,
 Nima Aghdaii <naghdaii <at> fb.com>
Subject: Re: bug#19563: grep -F: fix a heap buffer (read) overrun
Date: Mon, 12 Jan 2015 09:31:09 +0900

[Message part 1 (text/plain, inline)]

On Sat, 10 Jan 2015 15:43:02 -0800
Jim Meyering <jim <at> meyering.net> wrote:

> Colleagues Nima Aghdaii and Yuliy Pisetsky found and fixed a heap
> buffer overrun in grep's kwset.c.  The underlying bug, already hard to
> trigger, would most often result in a "mere" heap UMR (uninitialized
> memory read), but Yuliy constructed inputs (see the new test) that
> cause a buffer overrun.
> 
> I'm attaching two other related patches:
>   - grep: avoid false-positive UMR
>   - tests: add support for ASAN memory poisoning
> 
> I expect to push these by Monday.

How about the attachments instead for the second patch?

[0002-grep-F-fix-a-heap-buffer-read-overrun.patch (text/plain, attachment)]

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.