bug#79555: unexpand: heap-buffer-overflow

2025-10-02 Thread Pádraig Brady
On 02/10/2025 10:25, Frank Busse wrote: Hi, KLEE found another bug in Coreutils 9.8: $ printf '\x00\x08\x08\t' | unexpand '-3t +/ +6,' ASAN confirms: --- ==516254==ERROR: heap-buffer-overflow WRITE of size 1 at 0x7bd06c1e01f3 thread T0 #0 0x55fbf2552614 in unexpand src/unexpand.c:19

bug#79555: unexpand: heap-buffer-overflow

2025-10-02 Thread Pádraig Brady
On 02/10/2025 10:25, Frank Busse wrote: Hi, KLEE found another bug in Coreutils 9.8: $ printf '\x00\x08\x08\t' | unexpand '-3t +/ +6,' ASAN confirms: --- ==516254==ERROR: heap-buffer-overflow WRITE of size 1 at 0x7bd06c1e01f3 thread T0 #0 0x55fbf2552614 in unexpand src/unexpand.c:19

bug#79555: unexpand: heap-buffer-overflow

2025-10-02 Thread Frank Busse
Hi, KLEE found another bug in Coreutils 9.8: $ printf '\x00\x08\x08\t' | unexpand '-3t +/ +6,' ASAN confirms: --- ==516254==ERROR: heap-buffer-overflow WRITE of size 1 at 0x7bd06c1e01f3 thread T0 #0 0x55fbf2552614 in unexpand src/unexpand.c:195 #1 0x55fbf2552614 in main src/unexpan