Re: Buffer overflow in awk

From: JW (jwat_private)
Date: Tue Mar 26 2002 - 10:23:00 PST

  • Next message: Kurt Seifried: "Re: New Binary Bruteforcing Method Discovered"

    Doesn't work for me on SuSE 7.3... see below
    
    At 01:30 PM 3/15/2002 -0300, you wrote:
    >>> A buffer overflow exist in awk(named awk on most 
    >>> systems, but actualy is gawk/GNU awk) when calling 
    >> the -f option, to include an awk script, and supplying a 
    >> filename with a buffer length of 1022 and up. 
    >> [root@neural keoki]# awk -f `perl -e 'print "A" x 1022'` 
    >> awk: fatal error: internal error 
    >> Abort (core dumped)
    
    jw@suse3:~> awk --version
    GNU Awk 3.1.0
    
    
    jw@suse3:~> awk -f `perl -e 'print "A" x 1022'` 
    awk: fatal: can't open source file `AAAAAAAAAAAAAAAAAAAAAAAAA
    <snip many AAAs>
    AAAAA' for reading (File name too long)
    
    
    jw@suse3:~>  uname -srm;awk -W version|head -1;awk -f `perl -e 'printf "A" x 8177'`;
    
    Same error: <snip> AAAAA' for reading (File name too long) 
    
    No seg fault.
    
    ----------------------------------------------------
    Jonathan Wilson
    System Administrator
    Clickpatrol.com
    Cedar Creek Software     http://www.cedarcreeksoftware.com
    



    This archive was generated by hypermail 2b30 : Tue Mar 26 2002 - 10:42:52 PST