Re: Vulnerability Report on Sharutils 4.15.2

Petr Pisar <[email protected]> Tue, 10 Apr 2018 14:54:32 +0000 (UTC)

Newsgroups	gmane.comp.gnu.utils.bugs
Message-ID	<[email protected]>

On 2018-04-06, Salvatore Bonaccorso <[email protected]> wrote:
> AFAICT for this issue still no proposed fix is available for the
> issues raised in
> https://lists.gnu.org/archive/html/bug-gnu-utils/2018-02/msg00003.html,

Well, I cannot reproduce it. Maybe the attachent with the reproducer is
wrong. The message reads 2.fuzz, but the attachent contains four
SIGSEGV*.fuzz files. Runnning unshar on any of them results in:

sh: line 14386: warning: here-document at line 37 delimited by end-of-file (wanted `_EOF_')
sh: line 14387: syntax error: unexpected end of file

(the line numbers differ) and valgrdind does not show any issue in the
unshar process.

-- Petr