URL: <https://savannah.gnu.org/bugs/?64229>
Summary: [troff] I haz a DoS attack Group: GNU roff Submitter: gbranden Submitted: Sun 21 May 2023 03:29:57 PM UTC Category: Core Severity: 4 - Important Item Group: Crash/Unresponsive Status: None Privacy: Public Assigned to: None Open/Closed: Open Discussion Lock: Any Planned Release: None _______________________________________________________ Follow-up Comments: ------------------------------------------------------- Date: Sun 21 May 2023 03:29:57 PM UTC By: G. Branden Robinson <gbranden> Affects _groff_ 1.22.4. Maybe every _groff_ ever. Also Heirloom Doctools _nroff_.[1] Also DWB 3.3 _nroff_. Maybe every _*roff_ ever... $ { printf '.di foo\n.nf\n'; yes abcdefghijklm; } | nroff groff: troff: Signal 9 [1] Well, I _think_ so...its resident set size is at 1.7 GB and growing without apparent bound but it is _way_ slower at it than groff (27 seconds) or DWB (1 minute 32 seconds), which got killed by the kernel after a couple of minutes. Heirloom is still grinding after 20 minutes. So they may have a whole 'nother problem besides this one. _______________________________________________________ Reply to this item at: <https://savannah.gnu.org/bugs/?64229> _______________________________________________ Message sent via Savannah https://savannah.gnu.org/