oss-sec mailing list archives

Re: Re: Heap Overflow in PCRE

From: Tomas Hoger <thoger () redhat com>
Date: Mon, 30 Nov 2015 09:43:25 +0100

On Sun, 29 Nov 2015 05:58:01 -0500 (EST) cve-assign () mitre org wrote:

JavaScript may be "something else" in most cases, e.g.,

  http://blog.chromium.org/2009/02/irregexp-google-chromes-new-regexp.html
  https://github.com/v8/v8/tree/master/src/regexp
  https://hg.mozilla.org/mozilla-central/file/tip/js/src/irregexp


KDE/Konqueror uses pcre for JS regexps.

http://lxr.kde.org/source/kde/kdelibs/kjs/regexp.cpp?v=stable-qt4

-- 
Tomas Hoger / Red Hat Product Security

Current thread:

Heap Overflow in PCRE Hanno Böck (Nov 24)
- Re: Heap Overflow in PCRE Moritz Muehlenhoff (Nov 24)
  - Re: Heap Overflow in PCRE Hanno Böck (Nov 24)
- Re: Heap Overflow in PCRE Fabian Keil (Nov 24)
  - Re: Heap Overflow in PCRE Hanno Böck (Nov 24)
    - Re: Heap Overflow in PCRE Fabian Keil (Nov 25)
- Re: Heap Overflow in PCRE cve-assign (Nov 28)
  - Re: Re: Heap Overflow in PCRE Michal Zalewski (Nov 28)
    - Re: Heap Overflow in PCRE cve-assign (Nov 29)
    - Re: Re: Heap Overflow in PCRE Tomas Hoger (Nov 30)
  - Re: Heap Overflow in PCRE cve-assign (Dec 01)
    - Re: Re: Heap Overflow in PCRE Salvatore Bonaccorso (Dec 02)
    - Re: Heap Overflow in PCRE cve-assign (Dec 02)
    - Re: Re: Heap Overflow in PCRE Jakub Wilk (Dec 03)