From: Dan Nelson <dnelson@emsphone.com>
To: Jonel Rienton <nelski@jonelrienton.org>
Cc: Bart Schaefer <schaefer@candle.brasslantern.com>,
zsh-workers@sunsite.auc.dk
Subject: Re: buffer overflow on zsh-3.1.9
Date: Mon, 14 Aug 2000 22:19:08 -0500 [thread overview]
Message-ID: <20000814221907.C24766@dan.emsphone.com> (raw)
In-Reply-To: <NEBBJKIECKJPJKBDJJOECEGMCBAA.nelski@jonelrienton.org>; from "Jonel Rienton" on Mon Aug 14 18:13:24 GMT 2000
In the last episode (Aug 14), Jonel Rienton said:
> doesn't this constitute for a malicious user to bring down your
> system in a multi environment box?
No more than a "for(;;) malloc(1024);" loop or even /bin/sh's
"a=`yes`". Although having zsh core dump is bad form (sh simply prints
"out of space"). Adjust your shell's resource limits if you're worried
about their memory usage.
--
Dan Nelson
dnelson@emsphone.com
prev parent reply other threads:[~2000-08-15 3:19 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2000-08-14 18:34 Jonel Rienton
2000-08-14 18:38 ` Bart Schaefer
2000-08-14 23:13 ` Jonel Rienton
2000-08-15 1:04 ` Bart Schaefer
2000-08-15 3:19 ` Dan Nelson [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20000814221907.C24766@dan.emsphone.com \
--to=dnelson@emsphone.com \
--cc=nelski@jonelrienton.org \
--cc=schaefer@candle.brasslantern.com \
--cc=zsh-workers@sunsite.auc.dk \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
Code repositories for project(s) associated with this public inbox
https://git.vuxu.org/mirror/zsh/
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).