MESSAGE
| DATE | 2021-02-22 |
| FROM | Charles Pigott
|
| SUBJECT | Re: [Hangout - NYLXS] SIGSEGV crash due to undefined behaviour when
|
From hangout-bounces-at-nylxs.com Thu Mar 18 10:28:48 2021
Return-Path:
X-Original-To: archive-at-mrbrklyn.com
Delivered-To: archive-at-mrbrklyn.com
Received: from www2.mrbrklyn.com (www2.mrbrklyn.com [96.57.23.82])
by mrbrklyn.com (Postfix) with ESMTP id B6605164036;
Thu, 18 Mar 2021 10:28:47 -0400 (EDT)
X-Original-To: hangout-at-www2.mrbrklyn.com
Delivered-To: hangout-at-www2.mrbrklyn.com
Received: by mrbrklyn.com (Postfix, from userid 1000)
id B31F1163FD4; Thu, 18 Mar 2021 10:26:03 -0400 (EDT)
Resent-From: Ruben Safir
Resent-Date: Thu, 18 Mar 2021 10:26:03 -0400
Resent-Message-ID: <20210318142603.GY15427-at-www2.mrbrklyn.com>
Resent-To: hangout-at-mrbrklyn.com
X-Original-To: ruben-at-mrbrklyn.com
Delivered-To: ruben-at-mrbrklyn.com
Received: from mxout1-ec2-va.apache.org (mxout1-ec2-va.apache.org
[3.227.148.255]) by mrbrklyn.com (Postfix) with ESMTP id 4F656163FDA
for ; Mon, 22 Feb 2021 10:03:17 -0500 (EST)
Received: from mail.apache.org (mailroute1-lw-us.apache.org [207.244.88.153])
by mxout1-ec2-va.apache.org (ASF Mail Server at
mxout1-ec2-va.apache.org) with SMTP id D048D42D4D
for ; Mon, 22 Feb 2021 15:03:01 +0000 (UTC)
Received: (qmail 17109 invoked by uid 500); 22 Feb 2021 15:03:01 -0000
Mailing-List: contact modperl-help-at-perl.apache.org; run by ezmlm
Precedence: bulk
Delivered-To: mailing list modperl-at-perl.apache.org
Received: (qmail 17097 invoked by uid 99); 22 Feb 2021 15:03:01 -0000
Received: from spamproc1-he-de.apache.org (HELO spamproc1-he-de.apache.org)
(116.203.196.100)
by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 22 Feb 2021 15:03:01 +0000
Received: from localhost (localhost [127.0.0.1])
by spamproc1-he-de.apache.org (ASF Mail Server at spamproc1-he-de.apache.org)
with ESMTP id 6C53E1FF39A
for ; Mon, 22 Feb 2021 15:03:00 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at spamproc1-he-de.apache.org
X-Spam-Flag: NO
X-Spam-Score: -0.001
X-Spam-Level:
X-Spam-Status: No, score=-0.001 tagged_above=-999 required=6.31
tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1,
DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.2, RCVD_IN_MSPIKE_H2=-0.001,
SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=disabled
Authentication-Results: spamproc1-he-de.apache.org (amavisd-new);
dkim=pass (1024-bit key) header.d=rapitasystems.com
Received: from mx1-ec2-va.apache.org ([116.203.227.195])
by localhost (spamproc1-he-de.apache.org [116.203.196.100]) (amavisd-new,
port 10024) with ESMTP id 69H_3aaMr5du for ;
Mon, 22 Feb 2021 15:02:59 +0000 (UTC)
Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=40.107.11.135;
helo=gbr01-cwl-obe.outbound.protection.outlook.com;
envelope-from=cpigott-at-rapitasystems.com; receiver=
Received: from GBR01-CWL-obe.outbound.protection.outlook.com
(mail-eopbgr110135.outbound.protection.outlook.com [40.107.11.135])
by mx1-ec2-va.apache.org (ASF Mail Server at mx1-ec2-va.apache.org) with
ESMTPS id 52A79BCE61
for ; Mon, 22 Feb 2021 15:02:59 +0000 (UTC)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=hkpdl6cZHMZF20SvzENWenbrpbI2SdkGjWX8+4v5afeLBh9IvVIxez8zO1yKShL+vFLpo2LayLAfV4Yg/T1BG36mHxjqzYImbo+zFoIVwSk0dNKMCfp7H9WXy/iM8qfP6TJse/2PTuU7ZW2WimmCml8AI9q8fX8BKQeyQZ+eNeQ9RhF1h8kuaU7bAFpANkZ+7OCQoX9lHdOPiWdQaFeo3DG+JoO/MJs0E51Q1cDIv3TahY8U5S1d2PqM7eulI0mLBYSKzbO8PU7SvhzScVl5UHO+ssZvQFcX7FHbQG5r1zQ1GDRpdpHG2yaKqtdkZhnXCxN3zZ52WD1aK0n/LkX1jA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=+7WfvnMTLC8R1RdohQrKT1k88PubgnMTXa3wI3/G9Aw=;
b=KWjJD9FqX9iZsguwFoVvNfbaPTlt6jWNFhbnbMdze4mWcG7zbi4hCpy3Z4pgEK91Gsj+mg0WWzRn5ktWptOuFUlGIhVX+L7tJzf2nEO6dg2LP8LOH4GRRh44NZyf7OkJRuw9U8PQxaXWKYj1cAfkQKPV5XZzRnRiRY/VAgcoSPA4/knpukxYXk9Q5rdbCV5mjJMf/uDEkXMbm3IrBAU3VkD/sNmVfsFyJy7KbH0/ObvFdp1K6Y6utPXwheYO/KZpeMWCM7PKpbtXxvppjhtbhD5agOxHJfGQIyqy3HhIs/Q4hrR+72JZk7blUPEhsSsroLGAw6wOKosHLGT5wgeCqQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass
smtp.mailfrom=rapitasystems.com; dmarc=pass action=none
header.from=rapitasystems.com; dkim=pass header.d=rapitasystems.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rapitasystems.com;
s=selector2;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=+7WfvnMTLC8R1RdohQrKT1k88PubgnMTXa3wI3/G9Aw=;
b=b9W5COMRU447gQN2AErG9uklkv8AcqpeLK3WjypFXM64mPI/fzjOu8S30dmeQcXMb74BJggvZlCo6XW3zuM/0Cb07vYc02/Lojg2o8G+u5FWXtB5XNOzdcKnDJBOlXu/2aTEnMuIZ82266WfmRLgsCbao+vxxvoJZBeTLHA9G8k=
Received: from LO4P123MB4751.GBRP123.PROD.OUTLOOK.COM (2603:10a6:600:1c9::13)
by LO2P123MB2269.GBRP123.PROD.OUTLOOK.COM (2603:10a6:600:c5::12) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3868.30; Mon, 22 Feb
2021 15:02:51 +0000
Received: from LO4P123MB4751.GBRP123.PROD.OUTLOOK.COM
([fe80::35d4:4ae0:f36d:3f4d]) by LO4P123MB4751.GBRP123.PROD.OUTLOOK.COM
([fe80::35d4:4ae0:f36d:3f4d%7]) with mapi id 15.20.3868.033; Mon, 22 Feb 2021
15:02:51 +0000
From: Charles Pigott
To: Steve Hay
CC: "modperl-at-perl.apache.org"
Thread-Topic: SIGSEGV crash due to undefined behaviour when calling perl_parse
Thread-Index: AQHXBg5N1UW3qgy8UUys6BZS+oKqf6pfNdFBgAULVICAAApF2A==
Date: Mon, 22 Feb 2021 15:02:51 +0000
Message-ID:
References:
,
In-Reply-To:
Accept-Language: en-GB, en-US
Content-Language: en-GB
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: googlemail.com; dkim=none (message not signed)
header.d=none;googlemail.com; dmarc=none action=none
header.from=rapitasystems.com;
x-originating-ip: [92.40.201.36]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 4cf8664f-4145-47ea-14df-08d8d742ecc9
x-ms-traffictypediagnostic: LO2P123MB2269:
x-microsoft-antispam-prvs:
x-ms-oob-tlc-oobclassifiers: OLM:8273;
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:;
IPV:NLI; SFV:NSPM; H:LO4P123MB4751.GBRP123.PROD.OUTLOOK.COM; PTR:; CAT:NONE;
SFS:(4636009)(136003)(346002)(396003)(376002)(366004)(39830400003)(8936002)(5660300002)(19627405001)(26005)(33656002)(186003)(316002)(76116006)(7696005)(6506007)(86362001)(8676002)(83380400001)(55016002)(2906002)(55236004)(4744005)(166002)(4326008)(52536014)(71200400001)(66476007)(64756008)(9686003)(66946007)(478600001)(66556008)(66446008)(53546011)(6916009);
DIR:OUT; SFP:1102;
x-ms-exchange-antispam-messagedata: =?us-ascii?Q?+Hh+XBwWJbHUP0mEUEBie0m6IGLMs6w8RoKuR0ODkxnVLBaXppGONfBt/jl7?=
=?us-ascii?Q?9doWRdEjWZVTNKfZscEuxWlJXPIUm2ZBAtuhbGv8mV0JxXSD85YOIy4gKJAe?=
=?us-ascii?Q?KPy5fHgbH7xmxs9MA+ccPOid0ZihAI2WNRxo4xgcwA+4+sj8BRLqkQE9xy47?=
=?us-ascii?Q?8SOcryRcv+87HrhnOJOQCIxEdL5DDVPmIGHGVC3PP3S6vLtvzfRN29TThmYF?=
=?us-ascii?Q?lb+iGqP0I8R/WYvAbdG7RybaKucsbGCmKkVP4Mh6KI+vovNqpczdLgs6meJ1?=
=?us-ascii?Q?sUHo+bXCwbaTl3U/wYk8i6EHglQIvGLUQZOk9RpTnWiyuPCxmAoujyK9Kso/?=
=?us-ascii?Q?V3v3sagQ7bhmMbGBktP440TxT4kni8/2LJfnDsHUXXUoM9ayRnjy1xzhmlde?=
=?us-ascii?Q?2y5zlrQ7vmLtUXsUVcNaCB43IAcPyAxgU71s9MSWtCIV5SxRnsnReyCJCXHv?=
=?us-ascii?Q?dWnJESY9PQKyJeQAugp//Xojoy/op9qGIiag/iuwj7S3D93LrqglfoPHR74K?=
=?us-ascii?Q?9g9EJRDkV/SCC0S0ds9mgmbtPgFyL8JQoziH09truWR0YLXbf7SSuHXYoodu?=
=?us-ascii?Q?OrhINhv8YwUCTbdUmr1pL5pokuY5ZbSCkuxSkUXCYmBArUog0XkdSJYSkpKA?=
=?us-ascii?Q?Egv+5fcwnTRp67+ObRs3m3V3C+frBs8QCQDcRShZL5+YiQqmVPT8K6r/Yb9U?=
=?us-ascii?Q?5nwyWpguuYFjD5i6+Oj/KAQF8cp+CmpCHoU/5My4zy4wETOCri0IUnbt9guv?=
=?us-ascii?Q?Erf5zoGMoS21+RNThh0vEyniLNGcKE641s8dWR6k3QadKcTJ95z2WtnIRVAH?=
=?us-ascii?Q?z0NyJO+GEujfFVS183bzuwL81bBQ6GE5xHaiweto7g5ScnkSZpfeoQ82FRfA?=
=?us-ascii?Q?D2ANCyfhZCSR5zYs8tViSWlhMDgmb7kncWx5WW4PLDg2DRom84WNpUiH0+lI?=
=?us-ascii?Q?5yEFtpYFENMq0B4JgbPkBjUxP9Yqg/siaKLEqPuUSUUL9LRDx4hErcnTW/jy?=
=?us-ascii?Q?Xt00VBvNFwX2vHqJhezOiKsnqCItMjxc4I++PzcyCqvlHMuKDZlMAy+7VpiX?=
=?us-ascii?Q?l0zDif4ZeledFL1h/1/sbDQyXEDotTO7hcp5Gv09fRlKAh4wGK5rOAWimJgI?=
=?us-ascii?Q?E6JY2HdiALdlfN2AfYs6GfuPbZ+6dCV5uEw0qxtTYorGDCApjXYbidVjBVl4?=
=?us-ascii?Q?sTfrVg7PYMsSA+LmTVkipUl09mXe1dNVeJ/dhCvOAMOl4Ow9GDqMrrDl5rdg?=
=?us-ascii?Q?mvKuuIrBMF7naV6kiKl2Fey3D9BgQu3XjekXMmX6Ax/xJUAfCQEpEZjELjqN?=
=?us-ascii?Q?RQ8=3D?=
x-ms-exchange-transport-forked: True
MIME-Version: 1.0
X-OriginatorOrg: rapitasystems.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: LO4P123MB4751.GBRP123.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-Network-Message-Id: 4cf8664f-4145-47ea-14df-08d8d742ecc9
X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Feb 2021 15:02:51.2393 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 63a1ab10-c4bd-4b99-881c-0040cec74971
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: Z3ugn9RxzLG4/98dlXVhJoNOPU+g/R+fWrWjdOBoRHETwqXoxZIy+iMol5t9+4N/XOUCgkUyNCTqCOiCPjn3OKr43beXw/6ha3EpDy1eJdM=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: LO2P123MB2269
Subject: Re: [Hangout - NYLXS] SIGSEGV crash due to undefined behaviour when
calling perl_parse
X-BeenThere: hangout-at-nylxs.com
X-Mailman-Version: 2.1.30rc1
List-Id: NYLXS Tech Talk and Politics
List-Unsubscribe: ,
List-Archive:
List-Post:
List-Help:
List-Subscribe: ,
Content-Type: multipart/mixed; boundary="===============0356763516=="
Errors-To: hangout-bounces-at-nylxs.com
Sender: "Hangout"
--===============0356763516==
Content-Language: en-GB
Content-Type: multipart/alternative;
boundary="_000_LO4P123MB47518FAA6D3BCB7340F3645BAE819LO4P123MB4751GBRP_"
--_000_LO4P123MB47518FAA6D3BCB7340F3645BAE819LO4P123MB4751GBRP_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Thanks very much!
Charles
________________________________
From: Steve Hay
Sent: 22 February 2021 14:25
To: Charles Pigott
Cc: modperl-at-perl.apache.org
Subject: Re: SIGSEGV crash due to undefined behaviour when calling perl_par=
se
On Fri, 19 Feb 2021 at 09:25, Charles Pigott wr=
ote:
>
>
> Hi,
>
> TL;DR: mod_perl is using perl_parse() incorrectly and not NULL-terminatin=
g the argv array passed to it.
>
> I've attached my suggested patch.
Thanks for the patch. I've committed this to the mod_perl trunk
(https://svn.apache.org/viewvc?view=3Drevision&revision=3D1886793) so it
will appear in the next release (2.0.12).
--
Register for our online DO-178C & Multicore training with ConsuNova: 8-12th=
March 2021il_footer>.
--_000_LO4P123MB47518FAA6D3BCB7340F3645BAE819LO4P123MB4751GBRP_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
>
: 12pt; color: rgb(0, 0, 0);">
Thanks very much!
: 12pt; color: rgb(0, 0, 0);">
: 12pt; color: rgb(0, 0, 0);">
Charles
yle=3D"font-size:11pt" color=3D"#000000">From: Steve Hay <steve.m=
.hay-at-googlemail.com>
Sent: 22 February 2021 14:25
To: Charles Pigott <cpigott-at-rapitasystems.com>
Cc: modperl-at-perl.apache.org <modperl-at-perl.apache.org>
Subject: Re: SIGSEGV crash due to undefined behaviour when calling p=
erl_parse
">
On Fri, 19 Feb 2021 at 09:25, Charles Pigott <c= pigott-at-rapitasystems.com> wrote: > > > Hi, > > TL;DR: mod_perl is using perl_parse() incorrectly and not NULL-termina= ting the argv array passed to it. > > I've attached my suggested patch. Thanks for the patch. I've committed this to the mod_perl trunk ( 86793">https://svn.apache.org/viewvc?view=3Drevision&revision=3D1886793=
) so it will appear in the next release (2.0.12).
--
aining/DO178C/?utm_source=3Demail_footer">Register for our online DO-178C &=
amp; Multicore training with ConsuNova: 8-12th March 2021.
--_000_LO4P123MB47518FAA6D3BCB7340F3645BAE819LO4P123MB4751GBRP_--
--===============0356763516==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
Hangout mailing list
Hangout-at-nylxs.com
http://lists.mrbrklyn.com/mailman/listinfo/hangout
--===============0356763516==--
--===============0356763516==
Content-Language: en-GB
Content-Type: multipart/alternative;
boundary="_000_LO4P123MB47518FAA6D3BCB7340F3645BAE819LO4P123MB4751GBRP_"
--_000_LO4P123MB47518FAA6D3BCB7340F3645BAE819LO4P123MB4751GBRP_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Thanks very much!
Charles
________________________________
From: Steve Hay
Sent: 22 February 2021 14:25
To: Charles Pigott
Cc: modperl-at-perl.apache.org
Subject: Re: SIGSEGV crash due to undefined behaviour when calling perl_par=
se
On Fri, 19 Feb 2021 at 09:25, Charles Pigott wr=
ote:
>
>
> Hi,
>
> TL;DR: mod_perl is using perl_parse() incorrectly and not NULL-terminatin=
g the argv array passed to it.
>
> I've attached my suggested patch.
Thanks for the patch. I've committed this to the mod_perl trunk
(https://svn.apache.org/viewvc?view=3Drevision&revision=3D1886793) so it
will appear in the next release (2.0.12).
--
Register for our online DO-178C & Multicore training with ConsuNova: 8-12th=
March 2021il_footer>.
--_000_LO4P123MB47518FAA6D3BCB7340F3645BAE819LO4P123MB4751GBRP_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
>
: 12pt; color: rgb(0, 0, 0);">
Thanks very much!
: 12pt; color: rgb(0, 0, 0);">
: 12pt; color: rgb(0, 0, 0);">
Charles
yle=3D"font-size:11pt" color=3D"#000000">From: Steve Hay <steve.m=
.hay-at-googlemail.com>
Sent: 22 February 2021 14:25
To: Charles Pigott <cpigott-at-rapitasystems.com>
Cc: modperl-at-perl.apache.org <modperl-at-perl.apache.org>
Subject: Re: SIGSEGV crash due to undefined behaviour when calling p=
erl_parse
">
On Fri, 19 Feb 2021 at 09:25, Charles Pigott <c= pigott-at-rapitasystems.com> wrote: > > > Hi, > > TL;DR: mod_perl is using perl_parse() incorrectly and not NULL-termina= ting the argv array passed to it. > > I've attached my suggested patch. Thanks for the patch. I've committed this to the mod_perl trunk ( 86793">https://svn.apache.org/viewvc?view=3Drevision&revision=3D1886793=
) so it will appear in the next release (2.0.12).
--
aining/DO178C/?utm_source=3Demail_footer">Register for our online DO-178C &=
amp; Multicore training with ConsuNova: 8-12th March 2021.
--_000_LO4P123MB47518FAA6D3BCB7340F3645BAE819LO4P123MB4751GBRP_--
--===============0356763516==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
Hangout mailing list
Hangout-at-nylxs.com
http://lists.mrbrklyn.com/mailman/listinfo/hangout
--===============0356763516==--
|
|
