Re: I've found a vulnerability in bash

2021-11-19 Thread Marshall Whittaker
You could argue that bash should parse filenames globbed from * that start with - and exclude them specifically, so I'll have to respectfully disagree. Also, it is not the programs doing the parsing of *, that is a function of bash. Try typing * in just your terminal/command line and see what hap

Re: I've found a vulnerability in bash

2021-11-19 Thread Alex fxmbsw7 Ratchev
dude, again, --version is not bashs arg, cp and touch et la are not bash and what u do there is start a suid bash is that such a wonder ? On Fri, Nov 19, 2021, 11:53 Marshall Whittaker wrote: > You could argue that bash should parse filenames globbed from * that start > with - and exclude them s

Re: I've found a vulnerability in bash

2021-11-19 Thread Kerin Millar
On 19/11/2021 10:53, Marshall Whittaker wrote: You could argue that bash should parse filenames globbed from * that start with - and exclude them specifically, so I'll have to respectfully disagree. One could, but it would not make for a compelling argument. Define GLOBIGNORE, if you insist.

Re: unbalanced parenthesis not recognized

2021-11-19 Thread Greg Wooledge
On Fri, Nov 19, 2021 at 08:02:19AM +0100, Harald Dunkel wrote: > On 2021-11-18 17:52:29, Robert Elz wrote: > > Date:Thu, 18 Nov 2021 10:34:40 +0100 > > From:Harald Dunkel > > Message-ID: > > > >| at least due to unbalanced parenthesis? > > > > Greg's reply wa

Re: I've found a vulnerability in bash

2021-11-19 Thread Ilkka Virta
On Fri, Nov 19, 2021 at 12:53 PM Marshall Whittaker < marshallwhitta...@gmail.com> wrote: > You could argue that bash should parse filenames globbed from * that start > with - and exclude them specifically, > Or a shell could prepend ./ to all globs relative globs. Not sure if that would change t

Re: I've found a vulnerability in bash

2021-11-19 Thread Kerin Millar
(Copying the list back in ...) On Fri, 19 Nov 2021 07:19:29 -0500 Marshall Whittaker wrote: > Though I do disagree with you, this is the only message in this thread that > even makes sense. Firstly, rm * is a valid - albeit unsafe - simple command, and one that is easily rectified. Secondly, t

Re: Unclosed quotes on heredoc mode

2021-11-19 Thread Robert Elz
Date:Thu, 18 Nov 2021 15:46:10 -0500 From:Chet Ramey Message-ID: <5c36d290-0e6e-2aa0-f388-20ec9369a...@case.edu> | Yeah, that's a bug. But it's probably baked in. Very. Just stopping parsing expansions while reading the here doc delim string would be easy (well, p

Re: I've found a vulnerability in bash

2021-11-19 Thread Marshall Whittaker
Fair. I'm not saying anyone has to change it, but I will call out what I think is a design flaw. But this is going to turn into some philosophical discussion as to whether it should have been done this way from the start. That I don't know, and hold no responsibility for, as I'm not a bash dev, I'

Re: unbalanced parenthesis not recognized

2021-11-19 Thread Chet Ramey
On 11/19/21 2:02 AM, Harald Dunkel wrote: "Some scenarios" is the point here. The parenthesis have to balance as soon as it comes to shell parameter expansion, which is (or should have been) the case here. OK. Let's look at the original example: : ${SSLDIR}:="${JM_WORK}/ssl"} Where do you

Re: I've found a vulnerability in bash

2021-11-19 Thread Kerin Millar
On Fri, 19 Nov 2021 10:05:39 -0500 Marshall Whittaker wrote: > Fair. I'm not saying anyone has to change it, but I will call out what I > think is a design flaw. But this is going to turn into some philosophical > discussion as to whether it should have been done this way from the start. > That

Re: I've found a vulnerability in bash

2021-11-19 Thread Eric Blake
On Fri, Nov 19, 2021 at 03:56:21PM +, Kerin Millar wrote: > On Fri, 19 Nov 2021 10:05:39 -0500 > Marshall Whittaker wrote: > > > Fair. I'm not saying anyone has to change it, but I will call out what I > > think is a design flaw. But this is going to turn into some philosophical > > discussi

Re: I've found a vulnerability in bash

2021-11-19 Thread Kerin Millar
(Copying the list back in ...) On Fri, 19 Nov 2021 17:37:54 +0100 Andreas Kusalananda Kähäri wrote: > On Fri, Nov 19, 2021 at 03:56:21PM +, Kerin Millar wrote: > > On Fri, 19 Nov 2021 10:05:39 -0500 > > Marshall Whittaker wrote: > > > > > Fair. I'm not saying anyone has to change it, but I

Re: I've found a vulnerability in bash

2021-11-19 Thread Kerin Millar
On Fri, 19 Nov 2021 13:40:16 -0600 Eric Blake wrote: > On Fri, Nov 19, 2021 at 03:56:21PM +, Kerin Millar wrote: > > On Fri, 19 Nov 2021 10:05:39 -0500 > > Marshall Whittaker wrote: > > > > > Fair. I'm not saying anyone has to change it, but I will call out what I > > > think is a design fl

Re: Using systemd-249's libnss_systemd.so.2 triggers a crash in bash-5.1's malloc.c

2021-11-19 Thread Chet Ramey
On 10/12/21 3:38 PM, Julien Moutinho wrote: Le mar. 05 oct. 2021 16h12 -0400, Chet Ramey a écrit : On 10/5/21 1:50 PM, Dominique Martinet wrote: If I change malloc_usable_size to return p->mh_nbytes instead of maxbytes, then the crash disappears.[2] That's the right fix. Chet, when you'll h

Re: I've found a vulnerability in bash

2021-11-19 Thread Robert Elz
Date:Fri, 19 Nov 2021 13:40:16 -0600 From:Eric Blake Message-ID: <2029194016.5xn6gydfbtwmv...@redhat.com> | According to POSIX, perl should REALLY be passing a "--" argument | between "-c" and the scalar string given by the user; see | https://www.austingrou