Control: retitle -1 hnb: [Mayhem] Segfaults if $HOME is not set
Control: tag -1 + confirmed pending
Control: severity -1 minor
Hi Alexandre,
thanks for the report. (appreciated as all the others :-)
Alexandre Rebert wrote:
> hnb crashes with exit status 139. We confirmed the crash by
> re-running it in a fresh debian unstable installation.
>
> The attachment [1] contains a testcase (under ./crash) crashing the
> program. It ensures that you can easily reproduce the bug. Additionally,
> under ./crash_info/, we include more information about the crash such as
> a core dump, the dmesg generated by the crash, and its output.
While it's of course the way the crash has been found, it's more than
what is necessary to reproduce the crash:
$ env -i hnb
[1] 17773 segmentation fault (core dumped) env -i hnb
already suffices. To track the issue further down, it already suffices
if $HOME is not set:
$ env -u HOME hnb
[1] 18987 segmentation fault (core dumped) env -u HOME hnb
Lowering the severity as I don't think that will causes issues in
normal usage nor do I expect this to be exploitable.
I've got a patch to make hnb bail out gracefully if $HOME is not set.
Will be part of the next upload.
Regards, Axel
--
,''`. | Axel Beckert <a...@debian.org>, http://people.debian.org/~abe/
: :' : | Debian Developer, ftp.ch.debian.org Admin
`. `' | 1024D: F067 EA27 26B9 C3FC 1486 202E C09E 1D89 9593 0EDE
`- | 4096R: 2517 B724 C5F6 CA99 5329 6E61 2FF9 CD59 6126 16B5
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
