nmap stack overflow in output subsystem

[Henri Doreau <henri.doreau () gmail com>]

Hi,

Nmap can reliably crash with a simple nmap -sV -dd -oN nmap.out
<targets> command under some conditions.

The two functions fatal() and log_vwrite() recursively call each
other, leading to a stack overflow. The root cause of it is
log_vwrite() calls that use bitmasks to describe log types (introduced
in r29083 I think), although unlike the regular log_write() function
log_vwrite() doesn't support such masks.

See the patch attached for a fix, that modifies log_vwrite() to add
support of log type bitmasks. I'd like someone to have a second look
at it.

Regards.

-- 
Henri

Attachment: output_so.diff
Description:

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/