From: Bart Schaefer <schaefer@brasslantern.com>
To: Jonel Rienton <nelski@jonelrienton.org>
Cc: zsh-workers@sunsite.auc.dk
Subject: RE: buffer overflow on zsh-3.1.9
Date: Mon, 14 Aug 2000 18:04:34 -0700 (PDT) [thread overview]
Message-ID: <Pine.LNX.4.20.0008141754440.14567-100000@aztec.zanshin.com> (raw)
In-Reply-To: <NEBBJKIECKJPJKBDJJOECEGMCBAA.nelski@jonelrienton.org>
On Mon, 14 Aug 2000, Jonel Rienton wrote:
> doesn't this constitute for a malicious user to bring down your system
> in a multi environment box?
If you have to defend your box against the users that have shell access,
you're already in much deeper trouble than anything a change to zsh would
help you with.
> This email is sent by qmail-1.03 on a
> FreeBSD 4.1-STABLE box
Incidentally, on my desktop linux box at work (a 200MHz Pentium II with
128Mb RAM, getting rather old now) I have to hit Alt-9 seven times to even
slow the shell down noticeably when I hit the next key, and it still
succeeded in inserting 'a' 9999999 times.
I don't recall for certain, but I believe FreeBSD may be one of the
platforms that has pathologically bad realloc() behavior when repeatedly
expanding the same buffer. Try configuring with --enable-zsh-mem to see
whether the behavior improves.
next prev parent reply other threads:[~2000-08-15 1:05 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2000-08-14 18:34 Jonel Rienton
2000-08-14 18:38 ` Bart Schaefer
2000-08-14 23:13 ` Jonel Rienton
2000-08-15 1:04 ` Bart Schaefer [this message]
2000-08-15 3:19 ` Dan Nelson
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=Pine.LNX.4.20.0008141754440.14567-100000@aztec.zanshin.com \
--to=schaefer@brasslantern.com \
--cc=nelski@jonelrienton.org \
--cc=zsh-workers@sunsite.auc.dk \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
Code repositories for project(s) associated with this public inbox
https://git.vuxu.org/mirror/zsh/
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).