Zsh Mailing List Archive
Messages sorted by: Reverse Date, Date, Thread, Author

Re: Buffer overflow with long fd numbers in redirects



On Oct 6,  4:24pm, Axel Beckert wrote:
}
} On Mon, Oct 06, 2014 at 04:00:44PM +0200, Mikael Magnusson wrote:
} > Someone reported this on IRC the other day,
} > % >&333333333333333333333
} > zsh: number truncated after 20 digits: 333333333333333333333
} > *** buffer overflow detected ***: zsh terminated
} > 
} > At least one place where this is mishandled is in exec.c around line 3215,
} 
} I can reproduce this in 5.0.6.
} 
} But I can't reproduce this in 4.3.17 as in Debian Wheezy.

I think that may be a difference in compilation rather than in code, i.e.
whether the binary was compiled with FORTIFY_SOURCE defined.

The char fdstr[4] has been there since before 1999.

DIGBUFSIZ should be used there, as PWS suggested.



Messages sorted by: Reverse Date, Date, Thread, Author