Re: I think I may have found a possible dos attack vector within bash.

2012-03-23 Thread Mike Frysinger
On Tuesday 20 March 2012 15:55:18 Chet Ramey wrote: > or the even simpler > > f() > { > f | f & > > } > f i like the variant that uses ":" instead of "f": :(){ :|:& };: -mike signature.asc Description: This is a digitally signed message part.

Re: I think I may have found a possible dos attack vector within bash.

2012-03-20 Thread Chet Ramey
On 3/20/12 2:17 PM, Stephane Chazelas wrote: > 2012-03-20 16:47:51 +, Eamonn Smyth: >> Without sounding alarmist, I can break my machine using bash. I also have a >> fix. I shall be officially releasing the c code this weekend at the >> hackathon london. > [...] > > A DOS vector often found is

Re: I think I may have found a possible dos attack vector within bash.

2012-03-20 Thread Stephane Chazelas
2012-03-20 16:47:51 +, Eamonn Smyth: > Without sounding alarmist, I can break my machine using bash. I also have a > fix. I shall be officially releasing the c code this weekend at the > hackathon london. [...] A DOS vector often found is bash *scripts* is when a script takes user input in a v

Re: I think I may have found a possible dos attack vector within bash.

2012-03-20 Thread dethrophes
Thanks Greg that makes more sense. I would have recognised DoS, dos though :) showing my age I guess. I'm inclined to doubt though that it can be defined as a Bash DoS whatever it is, otherwise a lot of installation/bash scripts would be up for the chop ;). Am 20.03.2012 19:00, schrieb Greg W

Re: I think I may have found a possible dos attack vector within bash.

2012-03-20 Thread Greg Wooledge
On Tue, Mar 20, 2012 at 06:47:17PM +0100, dethrophes wrote: > Secondly when you say dos? you mean a windows command prompt or you > actually mean DOS 6.22, dosbox, or a text box what do you consider dos?. He meant DoS, or "Denial of Service". He believes he has found some sort of security bug/ex

Re: I think I may have found a possible dos attack vector within bash.

2012-03-20 Thread dethrophes
Am 20.03.2012 18:04, schrieb Greg Wooledge: On Tue, Mar 20, 2012 at 04:47:51PM +, Eamonn Smyth wrote: Without sounding alarmist, I can break my machine using bash. I also have a fix. I shall be officially releasing the c code this weekend at the hackathon london. You included some C++ code

Re: I think I may have found a possible dos attack vector within bash.

2012-03-20 Thread dethrophes
Am 20.03.2012 17:47, schrieb Eamonn Smyth: Without sounding alarmist, I can break my machine using bash. I also have a fix. I shall be officially releasing the c code this weekend at the hackathon london. As my code following correctly implements the logic the dos attack vector is negated. The

Re: I think I may have found a possible dos attack vector within bash.

2012-03-20 Thread Greg Wooledge
On Tue, Mar 20, 2012 at 04:47:51PM +, Eamonn Smyth wrote: > Without sounding alarmist, I can break my machine using bash. I also have a > fix. I shall be officially releasing the c code this weekend at the > hackathon london. You included some C++ code (or possibly C code, if you're allowed to

I think I may have found a possible dos attack vector within bash.

2012-03-20 Thread Eamonn Smyth
Without sounding alarmist, I can break my machine using bash. I also have a fix. I shall be officially releasing the c code this weekend at the hackathon london. As my code following correctly implements the logic the dos attack vector is negated. The replacement code /*Do openql maths Now*/