Bug#780834: util-linux: [libfdisk] incorrect GPT header leads to segfault

2015-03-23 Thread Andreas Henriksson
Control: tags -1 fixed-upstream Control: forwarded -1 https://git.kernel.org/cgit/utils/util-linux/util-linux.git/commit/?id=9c6f3de60f9858e404a825824026bff4c42203fc Hello Otto Visser! On Mon, Mar 23, 2015 at 01:17:30PM +0100, Otto Visser wrote: > Upstream accepted the reordering patch in libfdi

Bug#780834: util-linux: [libfdisk] incorrect GPT header leads to segfault

2015-03-23 Thread Otto Visser
Upstream accepted the reordering patch in libfdisk (header length check before crc check), so that fixes the segfault: https://github.com/karelzak/util-linux/commit/9c6f3de60f9858e404a825824026bff4c42203fc Best regards, Otto. smime.p7s Description: S/MIME Cryptographic Signature

Bug#780834: util-linux: [libfdisk] incorrect GPT header leads to segfault

2015-03-20 Thread Otto Visser
Upstream 2.26.1 contains the same problem, just on different lines in the code. Problem forwarded to the upstream mailing list. Best, Otto. On 03/20/15 13:30, Andreas Henriksson wrote: > Hello Otto Visser! > > Manual fuzz testing... Thanks for your interest in hardening > the util-linux implem

Bug#780834: util-linux: [libfdisk] incorrect GPT header leads to segfault

2015-03-20 Thread Andreas Henriksson
Hello Otto Visser! Manual fuzz testing... Thanks for your interest in hardening the util-linux implementation. :) On Fri, Mar 20, 2015 at 10:11:56AM +0100, Otto Visser wrote: > Package: util-linux > Version: 2.25.2-5 > Severity: normal > > Dear Maintainer, > > Let's start with the TL;DR version

Bug#780834: util-linux: [libfdisk] incorrect GPT header leads to segfault

2015-03-20 Thread Otto Visser
Package: util-linux Version: 2.25.2-5 Severity: normal Dear Maintainer, Let's start with the TL;DR version: if fdisk encounters a GPT header with an incorrect size field it tries to calculate the CRC32 over whatever this size field is reporting, leading eventually to a segfault. Longer version