From unknown Fri Jun 20 18:17:43 2025 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) Content-Type: text/plain; charset=utf-8 From: bug#7993 <7993@debbugs.gnu.org> To: bug#7993 <7993@debbugs.gnu.org> Subject: Status: cut segmentation fault with unbounded ranges Reply-To: bug#7993 <7993@debbugs.gnu.org> Date: Sat, 21 Jun 2025 01:17:43 +0000 retitle 7993 cut segmentation fault with unbounded ranges reassign 7993 coreutils submitter 7993 Paul Marinescu severity 7993 normal thanks From debbugs-submit-bounces@debbugs.gnu.org Sun Feb 06 13:26:04 2011 Received: (at submit) by debbugs.gnu.org; 6 Feb 2011 18:26:04 +0000 Received: from localhost ([127.0.0.1] helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1Pm9JD-00039T-SU for submit@debbugs.gnu.org; Sun, 06 Feb 2011 13:26:04 -0500 Received: from eggs.gnu.org ([140.186.70.92]) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1Pm95H-0002p0-Ae for submit@debbugs.gnu.org; Sun, 06 Feb 2011 13:11:40 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1Pm9Db-0002DG-84 for submit@debbugs.gnu.org; Sun, 06 Feb 2011 13:20:16 -0500 X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=-4.2 required=5.0 tests=BAYES_00,RCVD_IN_DNSWL_MED autolearn=unavailable version=3.3.1 Received: from lists.gnu.org ([199.232.76.165]:59761) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Pm9Db-0002D4-51 for submit@debbugs.gnu.org; Sun, 06 Feb 2011 13:20:15 -0500 Received: from [140.186.70.92] (port=50435 helo=eggs.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1Pm9Da-0001EO-EC for bug-coreutils@gnu.org; Sun, 06 Feb 2011 13:20:15 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1Pm9DZ-0002CO-19 for bug-coreutils@gnu.org; Sun, 06 Feb 2011 13:20:14 -0500 Received: from smtp1.cc.ic.ac.uk ([155.198.5.155]:57596) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Pm9DY-0002C4-NI for bug-coreutils@gnu.org; Sun, 06 Feb 2011 13:20:12 -0500 Received: from indomitable.doc.ic.ac.uk ([146.169.7.18]) by smtp1.cc.ic.ac.uk with esmtpsa (TLSv1:AES256-SHA:256) (Exim 4.72) (envelope-from ) id 1Pm9DX-00040h-B0 for bug-coreutils@gnu.org; Sun, 06 Feb 2011 18:20:11 +0000 Message-ID: <4D4EE65B.3010408@imperial.ac.uk> Date: Sun, 06 Feb 2011 18:20:11 +0000 From: Paul Marinescu User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.1.12) Gecko/20100826 Thunderbird/3.0.7 MIME-Version: 1.0 To: bug-coreutils@gnu.org Subject: cut segmentation fault with unbounded ranges Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 7bit X-IC-MsgID: 1Pm9DX-00040h-B0 X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6 (newer, 3) X-Received-From: 155.198.5.155 X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6 (newer, 2) X-Received-From: 199.232.76.165 X-Spam-Score: -6.0 (------) X-Debbugs-Envelope-To: submit X-Mailman-Approved-At: Sun, 06 Feb 2011 13:26:02 -0500 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.11 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: debbugs-submit-bounces@debbugs.gnu.org Errors-To: debbugs-submit-bounces@debbugs.gnu.org X-Spam-Score: -6.0 (------) In coreutils 8.9 (latest), the following commands trigger an invalid memory access. cut -c1234567890- --output-d=: foo cut -f1234567890- --output-d=: foo cut -b1234567890- --output-d=: foo The number 1234567890 is just a random number 'big enough' to make the invalid access generate a segmentation fault but the invalid access happens for values as low as 8 (valgrind) The problem is that ranges going to end of line (i.e., 'x-') are not taken into account when calculating the size of the printable_field vector, but their lower bound is used as an index on line 525: if (output_delimiter_specified && !complement && eol_range_start && !is_printable_field (eol_range_start)) Paul From debbugs-submit-bounces@debbugs.gnu.org Sun Feb 06 13:50:01 2011 Received: (at 7993) by debbugs.gnu.org; 6 Feb 2011 18:50:01 +0000 Received: from localhost ([127.0.0.1] helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1Pm9gP-0003fY-4D for submit@debbugs.gnu.org; Sun, 06 Feb 2011 13:50:01 -0500 Received: from smtp1.cc.ic.ac.uk ([155.198.5.155]) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1Pm9gM-0003fJ-QY for 7993@debbugs.gnu.org; Sun, 06 Feb 2011 13:49:59 -0500 Received: from indomitable.doc.ic.ac.uk ([146.169.7.18]) by smtp1.cc.ic.ac.uk with esmtpsa (TLSv1:AES256-SHA:256) (Exim 4.72) (envelope-from ) id 1Pm9og-0006EY-Ff for 7993@debbugs.gnu.org; Sun, 06 Feb 2011 18:58:34 +0000 Message-ID: <4D4EEF56.9070202@imperial.ac.uk> Date: Sun, 06 Feb 2011 18:58:30 +0000 From: Paul Marinescu User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.1.12) Gecko/20100826 Thunderbird/3.0.7 MIME-Version: 1.0 To: "7993@debbugs.gnu.org" <7993@debbugs.gnu.org> Subject: Re: bug#7993: Acknowledgement (cut segmentation fault with unbounded ranges) References: <4D4EE65B.3010408@imperial.ac.uk> In-Reply-To: Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-IC-MsgID: 1Pm9og-0006EY-Ff X-Spam-Score: -6.3 (------) X-Debbugs-Envelope-To: 7993 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.11 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: debbugs-submit-bounces@debbugs.gnu.org Errors-To: debbugs-submit-bounces@debbugs.gnu.org X-Spam-Score: -6.4 (------) Please ignore this. It's a duplicate submission of bug# 7992 From debbugs-submit-bounces@debbugs.gnu.org Mon Feb 07 02:37:00 2011 Received: (at 7993-done) by debbugs.gnu.org; 7 Feb 2011 07:37:00 +0000 Received: from localhost ([127.0.0.1] helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1PmLee-0004Gb-BE for submit@debbugs.gnu.org; Mon, 07 Feb 2011 02:37:00 -0500 Received: from mx.meyering.net ([82.230.74.64]) by debbugs.gnu.org with esmtp (Exim 4.69) (envelope-from ) id 1PmLec-0004GP-Uw for 7993-done@debbugs.gnu.org; Mon, 07 Feb 2011 02:36:59 -0500 Received: by rho.meyering.net (Acme Bit-Twister, from userid 1000) id 75B7D6024C; Mon, 7 Feb 2011 08:45:36 +0100 (CET) From: Jim Meyering To: Paul Marinescu Subject: Re: bug#7993: Acknowledgement (cut segmentation fault with unbounded ranges) In-Reply-To: <4D4EEF56.9070202@imperial.ac.uk> (Paul Marinescu's message of "Sun, 06 Feb 2011 18:58:30 +0000") References: <4D4EE65B.3010408@imperial.ac.uk> <4D4EEF56.9070202@imperial.ac.uk> Date: Mon, 07 Feb 2011 08:45:36 +0100 Message-ID: <87ei7kz3rz.fsf@meyering.net> Lines: 3 MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: -5.8 (-----) X-Debbugs-Envelope-To: 7993-done Cc: 7993-done@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.11 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: debbugs-submit-bounces@debbugs.gnu.org Errors-To: debbugs-submit-bounces@debbugs.gnu.org X-Spam-Score: -5.8 (-----) > Please ignore this. It's a duplicate submission of bug# 7992 Ok. marking it closed. From unknown Fri Jun 20 18:17:43 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Mon, 07 Mar 2011 12:24:04 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator