oss-sec mailing list archives
Re: sagemath denial of service with abort() in gmp: overflow in mpz type
From: Georgi Guninski <gguninski () gmail com>
Date: Tue, 6 Sep 2022 18:14:38 +0300
The DoS can be a .cgi or in a web service, allowing only numerical and math functions input. As pointed by Jeffrey Walton, the problem is in libgmp, not in sage, and ubuntu asks for sending them crash info, including the coredump. To avoid the gmp crash in |2^2^64|, sage catches signals and ignores SIGABRT. The sage ``feature'' with more info is at: https://trac.sagemath.org/ticket/34492 avoid crash and print better error message when gmp calls abort()
Current thread:
- Re: sagemath denial of service with abort() in gmp: overflow in mpz type, (continued)
- Re: sagemath denial of service with abort() in gmp: overflow in mpz type Michael Orlitzky (Sep 06)
- Re: sagemath denial of service with abort() in gmp: overflow in mpz type Jeffrey Walton (Sep 06)
- Re: sagemath denial of service with abort() in gmp: overflow in mpz type Seth Arnold (Sep 06)
- Re: sagemath denial of service with abort() in gmp: overflow in mpz type Georgi Guninski (Sep 07)
- Re: sagemath denial of service with abort() in gmp: overflow in mpz type Jeremy Stanley (Sep 07)
- Re: sagemath denial of service with abort() in gmp: overflow in mpz type Russ Allbery (Sep 07)
- Re: sagemath denial of service with abort() in gmp: overflow in mpz type Georgi Guninski (Sep 08)
- Re: sagemath denial of service with abort() in gmp: overflow in mpz type Georgi Guninski (Sep 14)
- Re: sagemath denial of service with abort() in gmp: overflow in mpz type Jeremy Stanley (Sep 06)
- Re: sagemath denial of service with abort() in gmp: overflow in mpz type Georgi Guninski (Sep 06)
