CC-tea/coreutils
1
0
Fork 0
mirror of git://git.sv.gnu.org/coreutils.git synced 2026-08-07 09:11:11 +02:00
Code Issues Projects Releases Wiki Activity

doc: split -C: test and document a heap overflow

Browse Source 
This was introduced in coreutils 9.2 through commit v9.1-184-g40bf1591b,
and was fixed in coreutils 9.5 through commit v9.4-111-gc4c5ed8f4.
This issue has been assigned CVE-2024-0684.

* NEWS: Mention the bug fix.
* tests/split/line-bytes.sh: Add a test case.
Reported by Valentin Metz.
This commit is contained in:
Pádraig Brady
2024-01-18 00:05:18 +00:00
parent aa50ea55ea
commit c01ee18934
2 changed files with 16 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/split/line-bytes.sh
+12
View File
@@ -84,4 +84,16 @@ for b in $(seq 10); do
compare no_eol_splits_exp no_eol_splits || fail=1
done
# Test hold buffer management with --lines-bytes.
# The following triggers (with ASAN) a heap overflow issue
# between coreutils 9.2 and 9.4 inclusive.
printf '%131070s\n' '' >expaa || framework_failure_
printf 'x\n' >expab || framework_failure_
printf '%131071s\n' '' >expac || framework_failure_
cat expaa expab expac >bigin || framework_failure_
split -C 131072 ---io=131072 bigin || fail=1
compare expaa xaa || fail=1
compare expab xab || fail=1
compare expac xac || fail=1
Exit $fail