Re: bash sockets: printf \x0a does TCP fragmentation

2018-09-26 Thread Chet Ramey
On 9/26/18 2:17 AM, Dirk Wetter wrote: >> then what happens if "$data" is >> a paragraph of text with embedded newlines.  In that case, >> it sounds like bash might break apart the single printf >> output into smaller packets rather than transmitting the >> entirety of "$data" in 1 write (presumin

Local Privilege Escalation

2018-09-26 Thread cjoke
Hi, is there a bounty bug program for Bash? Sent with [ProtonMail](https://protonmail.com) Secure Email.

Re: Local Privilege Escalation

2018-09-26 Thread Eduardo Bustamante
On Wed, Sep 26, 2018 at 4:27 PM cjoke wrote: > > Hi, is there a bounty bug program for Bash? AFAIK, there isn't. If you found a security vulnerability in bash, please make sure to disclose it privately to Chet (chet.ra...@case.edu) instead of this public mailing list.