bugGNU gettext - Bugs: bug #45408, malformed input causes endless...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #45408: malformed input causes endless loop in xgettext -L shell

Submitter:  Hanno Boeck <hanno>
Submitted:  Thu 25 Jun 2015 03:13:46 PM UTC
   
 
Category:  Shell Severity:  3 - Normal
Item Group:  None Status:  Fix Released
Privacy:  Public Assigned to:  haible
Open/Closed:  Closed

Tue 14 Apr 2020 12:19:39 PM UTC, comment #4: 

The fix is contained in gettext 0.20.2.

Bruno Haible <haible>
Group administrator
Sun 18 Aug 2019 11:04:26 PM UTC, comment #3: 

Thanks for the report. I committed a fix that extends Daiki's patch a bit:
https://git.savannah.gnu.org/gitweb/?p=gettext.git;a=commitdiff;h=1d3a5bf83836de4ea6c7e7acc89acdfd12d9a553

Bruno Haible <haible>
Group administrator
Fri 26 Jun 2015 07:11:20 AM UTC, comment #2: 

Perhaps the attached patch might be sufficient.

(file #34325)

Daiki Ueno <ueno>
Group administrator
Fri 26 Jun 2015 02:52:14 AM UTC, comment #1: 

I'm not familiar with this part, but most of (or all?) xgettext scanners assume that the input is syntactically correct, as suggested in comments: "we assume a syntactically correct input file anyway".

The shell scanner indeed does not care the case where unbalanced expressions within a balanced expression.

Daiki Ueno <ueno>
Group administrator
Thu 25 Jun 2015 03:13:46 PM UTC, original submission:  

The attached file will generate an endless loop in xgettext in shell mode. Test with
xgettext -L shell [input]

Found with american fuzzy lop.

Hanno Boeck <hanno>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attached Files
file #34317:  xgettext-shell-loop added by hanno (5B - application/octet-stream - endless loop input)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by haible (Updated the item)
  • -email is unavailable- added by ueno (Posted a comment)
  • -email is unavailable- added by hanno (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

     

    Follow 7 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2023-01-04 haible StatusFixed Fix Released
    2019-08-18 haible StatusNone Fixed
        Assigned toNone haible
        Open/ClosedOpen Closed
    2016-11-27 haible CategoryNone Shell
    2015-06-26 ueno Attached File- Added 0001-xgettext-Proof-against-unterminated.patch, #34325
    2015-06-25 hanno Attached File- Added xgettext-shell-loop, #34317

    Back to the top

    Powered by Savane 3.13-3230.
    Corresponding source code