[Bug 798538] New: Segmentation fault in "sort -d" and "sort -M" with long line input

older
[Bug 816438] New: Dependency on...

bugzilla_noreply＠novell.com

15 Jan 2013 15 Jan '13

14:29

https://bugzilla.novell.com/show_bug.cgi?id=798538 https://bugzilla.novell.com/show_bug.cgi?id=798538#c0 Summary: Segmentation fault in "sort -d" and "sort -M" with long line input Classification: openSUSE Product: openSUSE 12.2 Version: Final Platform: x86-64 OS/Version: openSUSE 12.2 Status: NEW Severity: Major Priority: P5 - None Component: Basesystem AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: yuvalery@gmail.com QAContact: qa-bugs@suse.de CC: mail@bernhard-voelker.de, jren@suse.com Depends on: 796243 Found By: --- Blocker: --- +++ This bug was initially created as a clone of Bug #796243 +++ User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20100101 Firefox/17.0 "sort -d" and "sort -M" crashe if input stream contains very long strings % perl -e 'print "1","A"x50000000,"\r\n\r\n"' | sort -d [1] 13431 done perl -e 'print "1","A"x50000000,"\r\n\r\n"' | 13432 segmentation fault sort -d % perl -e 'print "1","A"x50000000,"\r\n\r\n"' | sort -M [1] 13433 done perl -e 'print "1","A"x50000000,"\r\n\r\n"' | 13434 segmentation fault sort -M Depending on the stack size the sequence can be as short as ~10MB (in the above example 50MB) Reproducible: Always Steps to Reproduce: 1. see above Actual Results: crash Expected Results: no crash -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Show replies by date

bugzilla_noreply＠novell.com

15 Jan 15 Jan

14:43

New subject: [Bug 798538] Segmentation fault in "sort -d" and "sort -M" with long line input

https://bugzilla.novell.com/show_bug.cgi?id=798538 https://bugzilla.novell.com/show_bug.cgi?id=798538#c1 --- Comment #1 from Bernhard Voelker 2013-01-15 14:43:22 UTC --- Bug also present in 12.1. Bug cannot be reproduced with upstream coreutils' sort, and therefore is most probably in SuSE's patches. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

14:43

New subject: [Bug 798538] Segmentation fault in "sort -d" and "sort -M" with long line input

https://bugzilla.novell.com/show_bug.cgi?id=798538 https://bugzilla.novell.com/show_bug.cgi?id=798538#c Valery Valery changed: What |Removed |Added ---------------------------------------------------------------------------- Depends on| |798541 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

14:46

New subject: [Bug 798538] Segmentation fault in "sort -d" and "sort -M" with long line input

https://bugzilla.novell.com/show_bug.cgi?id=798538 https://bugzilla.novell.com/show_bug.cgi?id=798538#c2 --- Comment #2 from Valery Valery 2013-01-15 14:46:11 UTC --- Yes, I believe it is in SUSE coreutils-i18n.patch. I mentioned it in the related bug https://bugzilla.novell.com/show_bug.cgi?id=796243 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

16 Jan 16 Jan

13:04

New subject: [Bug 798538] Segmentation fault in "sort -d" and "sort -M" with long line input

bugzilla_noreply＠novell.com

13:27

New subject: [Bug 798538] VUL-1: coreutils: segmentation fault in "sort -d" and "sort -M" with long line input

https://bugzilla.novell.com/show_bug.cgi?id=798538 https://bugzilla.novell.com/show_bug.cgi?id=798538#c3 Sebastian Krahmer changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|Segmentation fault in "sort |VUL-1: coreutils: |-d" and "sort -M" with long |segmentation fault in "sort |line input |-d" and "sort -M" with long | |line input --- Comment #3 from Sebastian Krahmer 2013-01-16 13:27:58 UTC --- Probably enough to fix it in Factory. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

13:28

New subject: [Bug 798538] VUL-1: coreutils: segmentation fault in "sort -d" and "sort -M" with long line input

https://bugzilla.novell.com/show_bug.cgi?id=798538 https://bugzilla.novell.com/show_bug.cgi?id=798538#c Sebastian Krahmer changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P2 - High |P3 - Medium CC| |krahmer@suse.com, | |security-team@suse.de AssignedTo|security-team@suse.de |pth@suse.com Severity|Major |Normal -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

14:41

New subject: [Bug 798538] VUL-1: coreutils: segmentation fault in "sort -d" and "sort -M" with long line input

https://bugzilla.novell.com/show_bug.cgi?id=798538 https://bugzilla.novell.com/show_bug.cgi?id=798538#c4 --- Comment #4 from Philipp Thomas 2013-01-16 15:41:48 CET --- I disagree strongly. Given that join, sort and uniq can be failed I'd rate this severe enough to warrant a complete update for both SLES and openSUSE. Im working on a patch that fixes all three secbugs. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

21 Jan 21 Jan

08:37

New subject: [Bug 798538] VUL-1: coreutils: segmentation fault in "sort -d" and "sort -M" with long line input

https://bugzilla.novell.com/show_bug.cgi?id=798538 https://bugzilla.novell.com/show_bug.cgi?id=798538#c5 --- Comment #5 from Bernhard Voelker 2013-01-21 08:37:20 UTC --- Fixed in Base:System, submitted to Factory: https://build.opensuse.org/request/show/149348 Fixes for openSUSE:Maintenance pending. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

14:08

New subject: [Bug 798538] VUL-1: coreutils: segmentation fault in "sort -d" and "sort -M" with long line input

https://bugzilla.novell.com/show_bug.cgi?id=798538 https://bugzilla.novell.com/show_bug.cgi?id=798538#c6 Marcus Meissner changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |meissner@suse.com --- Comment #6 from Marcus Meissner 2013-01-21 14:08:28 UTC --- @philipp: I agree -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

14:49

New subject: [Bug 798538] VUL-1: coreutils: segmentation fault in "sort -d" and "sort -M" with long line input

https://bugzilla.novell.com/show_bug.cgi?id=798538 https://bugzilla.novell.com/show_bug.cgi?id=798538#c7 --- Comment #7 from Sebastian Krahmer 2013-01-21 14:49:32 UTC --- Please wait with the opensuse submits until we've got a CVE. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.