full-disclosure - AWK Problem

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20030829090158.8496@intraplan.de>
From: helmut.hauser at intraplan.de (Helmut Hauser)
Subject: AWK Problem

We encountered a strange AWK Problem.

Problematic awk script command phrase on redhat 7.3 causing a DoS resulting
in a complete system crash.

If the file "xyz.dat" does not exist or is locked or file permission is
denied with using awk,

following offending phrase causes the crash:
   while (getline < "xyz.dat")

The correct use of awk is
   while ((getline < "xyz.dat") > 0)
or
   while (0 < (getline < "xyz.dat"))

This avoids an endless loop causing kernel panic., e.g. on redhat 7.3 Kernel
revision is 2.4.20.

Users do NOT have to have root privileges to bring the server down.

Excerpt from the man page:

The getline command returns 0 on end of file and -1 on  an
       error.   Upon an error, ERRNO contains a string describing
       the problem.

I notified Redhat on 11.03.2003 and got no answer.

Helmut Hauser
Systemadministration EDV
Intraplan Consult GmbH