This is the mail archive of the
cygwin
mailing list for the Cygwin project.
FYI - bash crash due to asprintf bug
- From: Eric Blake <ebb9 at byu dot net>
- To: cygwin at cygwin dot com
- Date: Tue, 28 Nov 2006 20:00:41 -0700
- Subject: FYI - bash crash due to asprintf bug
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
I found that I could crash bash due to an off-by-one bug in asprintf(). I
will be submitting a patch to newlib shortly, that both fixes the
off-by-one behavior, and reduces asprintf's use of realloc from quadratic
to log-linear performance (ie. calling realloc every time you add a byte
is bad, compared to doubling the buffer size every time you call realloc).
But that means that until the next cygwin release, all programs compiled
against cygwin's asprintf are vulnerable.
- --
Life is short - so eat dessert first!
Eric Blake ebb9@byu.net
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Cygwin)
Comment: Public key at home.comcast.net/~ericblake/eblake.gpg
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFFbPfZ84KuGfSFAYARAp7xAKCdKmcipaYeaMxIaCT6+vwTh+bfvwCg0e2n
KKQzAfoEyT4KpmYYsIB3Id0=
=iNQL
-----END PGP SIGNATURE-----
--
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
Problem reports: http://cygwin.com/problems.html
Documentation: http://cygwin.com/docs.html
FAQ: http://cygwin.com/faq/