Debian Bug report logs - #1024735
klibc-utils: klibc sh segfault on invalid substitutions

Package: klibc-utils; Maintainer for klibc-utils is Debian Kernel Team <debian-kernel@lists.debian.org>; Source for klibc-utils is src:klibc (PTS, buildd, popcon).

Reported by: Christoph Anton Mitterer <calestyo@scientia.org>

Date: Thu, 24 Nov 2022 05:12:02 UTC

Severity: normal

Tags: upstream

Found in version klibc/2.0.11-1

Forwarded to https://lists.zytor.com/archives/klibc/2022-November/004694.html

Reply or subscribe to this bug.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox

Report forwarded to debian-bugs-dist@lists.debian.org, Debian Kernel Team <debian-kernel@lists.debian.org>:
Bug#1024735; Package klibc-utils. (Thu, 24 Nov 2022 05:12:04 GMT) (full text, mbox, link).

Acknowledgement sent to Christoph Anton Mitterer <calestyo@scientia.org>:
New Bug report received and forwarded. Copy sent to Debian Kernel Team <debian-kernel@lists.debian.org>. (Thu, 24 Nov 2022 05:12:04 GMT) (full text, mbox, link).

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

Package: klibc-utils
Version: 2.0.11-1
Severity: normal
Tags: upstream


Hey there.

There’s a bug in ash-bashed shells, including the one shipped with
klibc.

The original variant is described here (for dash):
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1024635
respectively
https://lore.kernel.org/dash/b2e298215b3d51d8284296484caa138faddaa0e4.camel@scientia.org/


Apparently BusyBox’ sh (also ash based) doesn't segfault on the
example I've found above.

But Harald van Dijk was able to create an example where BusyBox’ sh
segfaults, too, reported:
http://lists.busybox.net/pipermail/busybox/2022-November/090036.html



klibc’s sh segfaults in BOTH cases.

I'll also post this to the upstream mailing list and set it as
forwarded here afterwards.

Thanks,
Chris.

Set Bug forwarded-to-address to 'https://lists.zytor.com/archives/klibc/2022-November/004694.html'. Request was from Christoph Anton Mitterer <calestyo@scientia.org> to control@bugs.debian.org. (Thu, 24 Nov 2022 05:33:02 GMT) (full text, mbox, link).

Information forwarded to debian-bugs-dist@lists.debian.org, Debian Kernel Team <debian-kernel@lists.debian.org>:
Bug#1024735; Package klibc-utils. (Wed, 07 Dec 2022 05:00:04 GMT) (full text, mbox, link).

Acknowledgement sent to Christoph Anton Mitterer <calestyo@scientia.org>:
Extra info received and forwarded to list. Copy sent to Debian Kernel Team <debian-kernel@lists.debian.org>. (Wed, 07 Dec 2022 05:00:04 GMT) (full text, mbox, link).

Message #12 received at 1024735@bugs.debian.org (full text, mbox, reply):

Hey Ben.

On Sun, 2022-11-27 at 17:51 +0100, Ben Hutchings wrote:
> I don't think I will work on this in klibc until there's a fix in
> upstream dash.  If you're still watching upstream dash, please let me
> know when there's a fix I can pick.

A patch has now been posted for dash at:
https://lore.kernel.org/dash/Y47ZlpwkQy+jiule@gondor.apana.org.au/
which is apparently scheduled to be merged into their git.

Cheers,
Chris.

Message #17 received at 1024735@bugs.debian.org (full text, mbox, reply):

Just for the records, meanwhile I've also opened a proper ticket about
this over at BusyBox regarding the same bug in their sh at:

https://bugs.busybox.net/show_bug.cgi?id=15171

Acknowledgement sent to Diederik de Haas <didi.debian@cknow.org>:
Extra info received and forwarded to list. Copy sent to Debian Kernel Team <debian-kernel@lists.debian.org>. (Wed, 07 Dec 2022 11:42:04 GMT) (full text, mbox, link).

Message #22 received at 1024735@bugs.debian.org (full text, mbox, reply):

[Message part 1 (text/plain, inline)]

On Wednesday, 7 December 2022 05:57:55 CET Christoph Anton Mitterer wrote:
> A patch has now been posted for dash at:
> https://lore.kernel.org/dash/Y47ZlpwkQy+jiule@gondor.apana.org.au/
> which is apparently scheduled to be merged into their git.

FTR: a v2 of that patch has been posted:
https://lore.kernel.org/dash/Y5BTWr28NgVMm8UG@gondor.apana.org.au/

[signature.asc (application/pgp-signature, inline)]

Send a report that this bug log contains spam.

Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Wed Jul 3 08:25:43 2024; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Debian Bug report logs - #1024735 klibc-utils: klibc sh segfault on invalid substitutions

Debian Bug report logs - #1024735
klibc-utils: klibc sh segfault on invalid substitutions