GNU bug report logs -
#59544
[PATCH] Fixed lib-src/etags.c command execute vulnerability
Previous Next
Reported by: "lux" <lx <at> shellcodes.org>
Date: Thu, 24 Nov 2022 15:28:02 UTC
Severity: normal
Tags: patch, security
Done: Eli Zaretskii <eliz <at> gnu.org>
Bug is archived. No further changes may be made.
Full log
Message #96 received at 59544-done <at> debbugs.gnu.org (full text, mbox):
> Date: Sun, 27 Nov 2022 23:44:07 +0800
> From: lux <lx <at> shellcodes.org>
>
> On Sun, 27 Nov 2022 16:15:38 +0200
> Eli Zaretskii <eliz <at> gnu.org> wrote:
>
> > But something is wrong with the 2 new tests: they fail. I replaced
> > the "good" files with the ones I get on my system, but the test fails
> > on another system. Could you please look into the test failures and
> > find a fix?
>
> Hi, I think because the order of the tag data of the files generated by
> different OS environments is different.
>
> I sorted the file using the sort command, test ok.
>
> ctags_update: CTAGS.good_update ${infiles}
> head -n 100 CTAGS.good_update > CTAGS
> tail -n 100 CTAGS.good_update >> CTAGS
> ${RUN} ${CTAGS_PROG} -o CTAGS -u ${ARGS}
> diff -u --suppress-common-lines --width=80 <(sort
> CTAGS.good_update) <(sort CTAGS)
>
> cp crlf CTAGS
> ${RUN} ${CTAGS_PROG} -o CTAGS -u ${ARGS}
> diff -u --suppress-common-lines --width=80 <(sort
> CTAGS.good_crlf) <(sort CTAGS)
Thanks, I installed a variant of this using more portable commands.
And with that, I'm closing this bug.
This bug report was last modified 2 years and 184 days ago.
Previous Next
GNU bug tracking system
Copyright (C) 1999 Darren O. Benham,
1997,2003 nCipher Corporation Ltd,
1994-97 Ian Jackson.