oss-sec mailing list archives

Re: so, can we do something about lesspipe? (+ a cpio bug to back up the argument)

From: Alexander Cherepanov <cherepan () mccme ru>
Date: Sun, 23 Nov 2014 19:34:00 +0300

On 2014-11-23 12:24, Michal Zalewski wrote:

there's isoinfo (?!)


$ mkdir dir/
$ genisoimage -o empty.iso dir/ 2> /dev/null
$ time zzuf -qcs: isoinfo -i empty.iso
zzuf[s=48,r=0.004]: signal 11 (SIGSEGV)

real    0m0.210s
user    0m0.084s
sys     0m0.008s

:-)

--
Alexander Cherepanov

Current thread:

so, can we do something about lesspipe? (+ a cpio bug to back up the argument) Michal Zalewski (Nov 23)
- Re: so, can we do something about lesspipe? (+ a cpio bug to back up the argument) Hanno Böck (Nov 23)
  - Re: so, can we do something about lesspipe? (+ a cpio bug to back up the argument) Bernhard Hermann (Nov 23)
  - Re: so, can we do something about lesspipe? (+ a cpio bug to back up the argument) Alexander Cherepanov (Dec 11)
- Re: so, can we do something about lesspipe? (+ a cpio bug to back up the argument) Alexander Cherepanov (Nov 23)
  - Re: so, can we do something about lesspipe? (+ a cpio bug to back up the argument) Lionel Debroux (Nov 23)
- Re: so, can we do something about lesspipe? (+ a cpio bug to back up the argument) Michael Samuel (Nov 23)
- CVE request: cpio heap-based buffer overflow [was Re: [oss-security] so, can we do something about lesspipe? (+ a cpio bug to back up the argument)] Murray McAllister (Nov 24)
  - Re: CVE request: cpio heap-based buffer overflow [was Re: [oss-security] so, can we do something about lesspipe? (+ a cpio bug to back up the argument)] cve-assign (Nov 26)
- Re: so, can we do something about lesspipe? (+ a cpio bug to back up the argument) Alexander Cherepanov (Dec 11)