From mboxrd@z Thu Jan 1 00:00:00 1970 From: Johannes Sixt Subject: Re: [PATCH v2] Fix buffer overflow in config parser Date: Wed, 15 Apr 2009 09:39:36 +0200 Message-ID: <49E58F38.5060103@viscovery.net> References: <49E50003.2040907@intra2net.com> <7v3aca3lpl.fsf@gitster.siamese.dyndns.org> <49E5888D.2090607@viscovery.net> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: Johannes Sixt , Johannes Schindelin , Thomas Jarosch , git@vger.kernel.org, markus.heidelberg@web.de To: Junio C Hamano X-From: git-owner@vger.kernel.org Wed Apr 15 09:41:27 2009 Return-path: Envelope-to: gcvg-git-2@gmane.org Received: from vger.kernel.org ([209.132.176.167]) by lo.gmane.org with esmtp (Exim 4.50) id 1LtzkH-0000iO-LO for gcvg-git-2@gmane.org; Wed, 15 Apr 2009 09:41:22 +0200 Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1753444AbZDOHjt (ORCPT ); Wed, 15 Apr 2009 03:39:49 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1751579AbZDOHjt (ORCPT ); Wed, 15 Apr 2009 03:39:49 -0400 Received: from lilzmailso02.liwest.at ([212.33.55.13]:22494 "EHLO lilzmailso02.liwest.at" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751267AbZDOHjs (ORCPT ); Wed, 15 Apr 2009 03:39:48 -0400 Received: from cm56-163-160.liwest.at ([86.56.163.160] helo=linz.eudaptics.com) by lilzmailso02.liwest.at with esmtpa (Exim 4.69) (envelope-from ) id 1Ltzia-0001Jg-Mk; Wed, 15 Apr 2009 09:39:43 +0200 Received: from [127.0.0.1] (J6T.linz.viscovery [192.168.1.96]) by linz.eudaptics.com (Postfix) with ESMTP id 7349D795; Wed, 15 Apr 2009 09:39:36 +0200 (CEST) User-Agent: Thunderbird 2.0.0.21 (Windows/20090302) In-Reply-To: <49E5888D.2090607@viscovery.net> X-Enigmail-Version: 0.95.5 X-Spam-Score: -1.4 (-) Sender: git-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: git@vger.kernel.org Archived-At: Johannes Sixt schrieb: > Junio C Hamano schrieb: >> Johannes Schindelin writes: >> >>> Hi, >>> >>> On Tue, 14 Apr 2009, Thomas Jarosch wrote: >>> >>>> t/t1303-wacky-config.sh | 9 ++++++++- >>> I like the name! >>> >>>> +LONG_VALUE=`perl -e 'print "x" x 1023," a"'` >>> But should it not be guarded against NO_PERL? >> The right question to ask is a rhetorical "do we need perl to do this?" > > LONG_VALUE=$(printf "x%0.1021dx a", 7) Oops! Make this LONG_VALUE=$(printf "x%01021dx a" 7) -- Hannes