Re: possible stack flow in bash

From: Sebastian Jaenicke (tsa@jaenicke.org)
Date: 06/29/02 

Date: Sat, 29 Jun 2002 18:30:52 +0200
From: Sebastian Jaenicke <tsa@jaenicke.org>
To: vuln-dev@securityfocus.com

Hi,

On Fri, Jun 28, 2002 at 04:03:27PM +0000, Junior wrote:
> Stack in bash stows observing possible.
>
> Step 1 - bash-2.05a# ls "!x123456"
> ...exitexitexitexitexitexitexitexitexitexitexitexitexitexitexitexitexitexitexite
> xitexitexitexitexitexitexitexitexitexitexitexitexitexitexitexitexitexitexitexite
> xitexitexitexitexitexitexitexitexitexit"
> bash: /bin/ls: Argument list too long
>
> Step 2 - bash-2.05a# ls "!x123456"
> ...!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
> !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
> bash: xrealloc: cannot reallocate 134322944 bytes (0 bytes allocated)
>
> Welcome to Linux 2.4.18 (tty8)

I can't reproduce this on ROCK Linux with bash 2.05a:

[tsa@azathoth ~]$ echo $SHELL
/bin/bash
[tsa@azathoth ~]$ /bin/bash --version
GNU bash, version 2.05a.0(1)-release (i686-pc-linux-gnu)
Copyright 2001 Free Software Foundation, Inc.
[tsa@azathoth ~]$ ls "!x123456"
bash: !x123456: event not found
[tsa@azathoth ~]$

- Sebastian 

-- 
Sebastian Jaenicke
whois pgpkey-18AC0BE4 -h whois.ripe.net|perl -ne's-^certif: +--&&print'
  "Object-oriented programming is an exceptionally bad idea which
   could only have originated in California." --Edsger Dijkstra