[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Vulnerability Report on Sharutils 4.15.2
|
From: |
Petr Pisar |
|
Subject: |
Re: Vulnerability Report on Sharutils 4.15.2 |
|
Date: |
Tue, 10 Apr 2018 14:54:32 +0000 (UTC) |
|
User-agent: |
slrn/1.0.3 (Linux) |
On 2018-04-06, Salvatore Bonaccorso <address@hidden> wrote:
> AFAICT for this issue still no proposed fix is available for the
> issues raised in
> https://lists.gnu.org/archive/html/bug-gnu-utils/2018-02/msg00003.html,
Well, I cannot reproduce it. Maybe the attachent with the reproducer is
wrong. The message reads 2.fuzz, but the attachent contains four
SIGSEGV*.fuzz files. Runnning unshar on any of them results in:
sh: line 14386: warning: here-document at line 37 delimited by end-of-file
(wanted `_EOF_')
sh: line 14387: syntax error: unexpected end of file
(the line numbers differ) and valgrdind does not show any issue in the
unshar process.
-- Petr