Vulnerability Development: Re: vi buffer overflow

[Thomas Graf <reeler () reeler org>]

hey

* k_aneda () yahoo com wrote:
> Did some testing of my own.
>
> on Redhat 7.0 (VIM 5.7.8)
> # vi `perl -e 'print "A" x 9000'`
> Vim: Caught deadly signal SEGV
Same for 5.6 releases but it's at least gone in the 6.0.61
(maybe in all 6.0.x releases) release. The more critical point
is that the filename is saved in the .viminfo file and if you
open it in an older release vim will segfault until you
remove the entry from the file.

jaa, thomas
-- 
I wish life had multiple save points like games do. It'd be easier
to go back and fix major screwups. I'd just have to make sure I
'save' every five minutes.
   - Piro, Megatokyo Strip 67