Re: Potential vulnerabilities in BASH 4.3

2014-08-11 Thread Mike Frysinger
On Mon 11 Aug 2014 21:07:06 Hádrian R wrote: > Hi, I'm Hádrien Romero Soria - @Kaiwaiata​​, I am a 16 year old boy, > passionate about computer security, since more than 8h searching and > finding various possible vulnerabilities in source code of bash.. > I will tell you one vulnerability now, if

Potential vulnerabilities in BASH 4.3

2014-08-11 Thread Hádrian R
Hi, I'm Hádrien Romero Soria - @Kaiwaiata​​, I am a 16 year old boy, passionate about computer security, since more than 8h searching and finding various possible vulnerabilities in source code of bash.. I will tell you one vulnerability now, if they treat me well I will tell the other.. foolish o

Re: Segmentation fault bash 4.3.022

2014-08-11 Thread Chet Ramey
On 8/11/14, 3:05 PM, Geir Hauge wrote: > And lastly, in interactive mode > $ set +m; shopt -s lastpipe; trap -- "printf x" ERR; true | { true | false; > } > xxx > > Can't quite understand why it would trigger the ERR trap thrice. That's easy enough to explain. The ERR trap is triggered wherever

Re: Segmentation fault bash 4.3.022

2014-08-11 Thread Chet Ramey
On 8/11/14, 2:21 PM, lolilolicon wrote: > Sorry for the unhelpful title, but I can't find a one that isn't > longer than the body of the mail. > > The following code segfaults when run by bash 4.3.022 > > set -E > shopt -s lastpipe > trap -- 'true' ERR > true | { true | false; } > > This

Re: Segmentation fault bash 4.3.022

2014-08-11 Thread Geir Hauge
2014-08-11 20:47 GMT+02:00 Greg Wooledge : > On Tue, Aug 12, 2014 at 02:21:18AM +0800, lolilolicon wrote: > > The following code segfaults when run by bash 4.3.022 > > > > set -E > > shopt -s lastpipe > > trap -- 'true' ERR > > true | { true | false; } > > I could not reproduce this, on HP

Re: Segmentation fault bash 4.3.022

2014-08-11 Thread Greg Wooledge
On Tue, Aug 12, 2014 at 02:21:18AM +0800, lolilolicon wrote: > The following code segfaults when run by bash 4.3.022 > > set -E > shopt -s lastpipe > trap -- 'true' ERR > true | { true | false; } I could not reproduce this, on HP-UX or Linux. I tried from an interactive shell, just typin

Segmentation fault bash 4.3.022

2014-08-11 Thread lolilolicon
Sorry for the unhelpful title, but I can't find a one that isn't longer than the body of the mail. The following code segfaults when run by bash 4.3.022 set -E shopt -s lastpipe trap -- 'true' ERR true | { true | false; } This is probably related to the bug patched by bash43-022.