Subject: bug#26227: closed (Re: bug#26227: grep critical local DoS from userspace)

From: [email-masked] (GNU bug Tracking System)
Date: Sun, 26 Mar 2017 01:10:03 +0000

Your bug report

#26227: grep critical local DoS from userspace

which was filed against the grep package, has been closed.

The explanation is attached below, along with your original report.
If you require more details, please reply to [email-masked].

-- 
26227: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=26227
GNU Bug Tracking System
Contact [email-masked] with problems

Subject: Re: bug#26227: grep critical local DoS from userspace
From: Jim Meyering <[email-masked]>
To: Tomasz Tomkowiak <[email-masked]>
Cc: [email-masked]
Date: Sat, 25 Mar 2017 18:08:36 -0700
List-Id: <debbugs-submit.debbugs.gnu.org>

tags 26227 notabug
thanks

On Fri, Mar 24, 2017 at 12:19 AM,  <[email-masked]> wrote:
> Ah yes. Mea culpa. This, of course, may be a old bins/kernel/distro bug... ;]
>
> root@fal:~# cat /etc/debian_version
> 8.7
> (upgraded)
>
> root@fal:~# cat /proc/version
> Linux version 3.16.0-4-amd64 ([email-masked]) (gcc version 4.8.4 (Debian 4.8.4-1) ) #1 SMP Debian 3.16.39-1+deb8u2 (2017-03-07)
>
> root@fal:~# grep -V
> grep (GNU grep) 2.20

In that case, I'm closing this auto-created issue and tagging it as "notabug".

Subject: grep critical local DoS from userspace
From: [email-masked]
To: [email-masked]
Date: Thu, 23 Mar 2017 20:11:58 +0100
List-Id: <debbugs-submit.debbugs.gnu.org>

Hello,

Today I searched some files and... my server goes to hell (crash).

replication:

0. log into root or user account (whatever)
1. make a huge empty file (eg. 10 GB of zeros)
(my is: -rw-r--r-- 1 root root 10485760000 Feb 28 18:14 testfile.out)
2. grep -Hi "\/tmp\/" * 2>/dev/null
3. crash (probably due to out of memory)

... damn...

greetz,
-- 
Tomasz 'BloodMan' Tomkowiak