Re: Vulnerability Report(UI Redressing)

On 3/7/23 1:49 PM, Elijah Conners wrote: Chet Ramey writes: Why would you feel you're entitled to a reward? Because they're trying to take advantage of other people. Exactly. I just want him to admit it, even if he doesn't do it in so many words. -- ``The lyf so short, the craft so long to

Re: Vulnerability Report(UI Redressing)

Chet Ramey writes: > Why would you feel you're entitled to a reward? Because they're trying to take advantage of other people. This particular person also left another report for a missing SPF record to this same website and attempted to extort them out of money as well. Rather poor behavior o

asan report+fix in sh_mkdoublequoted

mkdir -p /tmp/bin >'/tmp/bin/$' chmod +x '/tmp/bin/$' PATH=/tmp/bin ./bash --norc -in <<<$'\e*' ERROR: AddressSanitizer: heap-buffer-overflow on address 0x0001039a9913 at pc 0x0001004d57b4 bp 0x00016fdf1350 sp 0x00016fdf1348 WRITE of size 1 at 0x0001039a9913 thread T0 frame #5: 0x0001004d

asan report in spname

happens when attempting spell-correct-word on an empty line ./bash --norc -in <<<$'\030s' ERROR: AddressSanitizer: heap-buffer-overflow on address 0x000102e0d0d1 at pc 0x0001004ccf64 bp 0x00016fdf0e30 sp 0x00016fdf0e28 READ of size 1 at 0x000102e0d0d1 thread T0 frame #5: 0x0001004ccf64 b

asan report in bash_add_history

./bash --norc -in <<<$'\\\n.' bashhist.c:899:8: runtime error: addition of unsigned offset to 0x00010700d190 overflowed to 0x00010700d18f ERROR: AddressSanitizer: heap-buffer-overflow on address 0x00010700d18f at pc 0x0001045fe1b8 bp 0x00016bb1f350 sp 0x00016bb1f348 READ of size 1 at 0x00010700d1