GNU bug report logs - #19827
sed 4.2.2 hangs when passed specially crafted program

Previous Next

Full log

View this message in rfc822 format

From: help-debbugs <at> gnu.org (GNU bug Tracking System)
To: Jim Meyering <jim <at> meyering.net>
Cc: tracker <at> debbugs.gnu.org
Subject: bug#19827: closed (sed 4.2.2 hangs when passed specially crafted
 program)
Date: Mon, 04 May 2015 04:59:02 +0000

[Message part 1 (text/plain, inline)]

Your message dated Sun, 3 May 2015 21:57:54 -0700
with message-id <CA+8g5KHdH_ResgqcvKYJL0DdzhAfX-BHQ9QocHpGEUUwWE_Dbg <at> mail.gmail.com>
and subject line Re: sed 4.2.2 hangs when passed specially crafted program
has caused the debbugs.gnu.org bug report #19827,
regarding sed 4.2.2 hangs when passed specially crafted program
to be marked as done.

(If you believe you have received this mail in error, please contact
help-debbugs <at> gnu.org.)


-- 
19827: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=19827
GNU Bug Tracking System
Contact help-debbugs <at> gnu.org with problems

[Message part 2 (message/rfc822, inline)]

From: Alexander Nasonov <alnsn <at> yandex.ru>
To: bug-sed <at> gnu.org
Subject: sed 4.2.2 hangs when passed specially crafted program
Date: Tue, 10 Feb 2015 08:18:27 +0000

This was found by the afl fuzzer http://lcamtuf.coredump.cx/afl/

$ echo | gsed -f afl-out/crashes/id*03,*
^C

$ cat afl-out/crashes/id*03,*
$G
$D


$ hexdump -C afl-out/crashes/id*03,*
00000000  24 47 0a 24 44 0a 0a 0a                           |$G.$D...|
00000008


or

echo | gsed -e '$G
> $D
>
>
> '
^C

I ran the fuzzer and the test on NetBSD amd64 7.99.x.

Alex

[Message part 3 (message/rfc822, inline)]

From: Jim Meyering <jim <at> meyering.net>
To: 19827-done <at> debbugs.gnu.org, Alexander Nasonov <alnsn <at> yandex.ru>
Subject: Re: sed 4.2.2 hangs when passed specially crafted program
Date: Sun, 3 May 2015 21:57:54 -0700

tags 19827 notabug
thanks

I've just noticed that there are some bug reports that have never
reached my inbox.
The first one I've examined is https://debbugs.gnu.org/19827, which reports
that you used the afl fuzzer http://lcamtuf.coredump.cx/afl/ to find that this
command never terminates:

  echo | sed/sed 'G;D'

However, that is a legitimate program, and
with that input, it happens to specify an endless loop.
Thus, I'm marking this as "notabug" and closing the issue.
However, you are welcome to make further comments.

Thank you for helping to test GNU sed!
I'm planning to release sed-3.4 soon, so if you have more
time for testing (using the latest from git), it'd be great to
see how we're doing.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.