bug#78507: [Security] Heap Buffer Overflow in GNU Coreutils sort (CWE-122)

2025-05-20 Thread Pádraig Brady
On 20/05/2025 19:24, Paul Eggert wrote: On 2025-05-20 10:15, Pádraig Brady wrote: The attached patch addresses the issue here, and includes a test verified to trigger with ASAN or valgrind available. Thanks. A nit: the patch doesn't include the change to NEWS. Good spot. Fixed and pushed. M

bug#78507: [Security] Heap Buffer Overflow in GNU Coreutils sort (CWE-122)

2025-05-20 Thread Paul Eggert
On 2025-05-20 10:15, Pádraig Brady wrote: The attached patch addresses the issue here, and includes a test verified to trigger with ASAN or valgrind available. Thanks. A nit: the patch doesn't include the change to NEWS.

bug#78507: [Security] Heap Buffer Overflow in GNU Coreutils sort (CWE-122)

2025-05-20 Thread Pádraig Brady
On 20/05/2025 16:15, Pádraig Brady wrote: Indeed. I introduced this in coreutils 7.2 (2009). One can repro on Fedora for e.g. with: _POSIX2_VERSION=200809 LC_ALL=C valgrind sort +0.18446744073709551615R poc_input.txt ==984625== Memcheck, a memory error detector ==984625== Using Valgrind-3.24.0

bug#78507: [Security] Heap Buffer Overflow in GNU Coreutils sort (CWE-122)

2025-05-20 Thread Pádraig Brady
On 20/05/2025 10:31, Med Maatallah wrote: Dear GNU Coreutils Maintainers, I am reporting a heap buffer overflow vulnerability (CWE-122) I've discovered in the GNU Coreutils sort utility. This issue affects the traditional key specification syntax processing and leads to an out-of-bounds

bug#40530: feature proposal: coreutils -> sort: adding sorting ability for Hebrew numerals

2020-04-10 Thread Zeev Pekar
Hello Assaf, thank you for your quick response! > > > it would be nice to be able to sort (coreutils -> sort) Hebrew > > numerals: > > > > An interesting idea, but I think it is a bit too niche to be included > in the coreutils “sort” program (tradeoff of usef

bug#40530: feature proposal: coreutils -> sort: adding sorting ability for Hebrew numerals

2020-04-09 Thread Assaf Gordon
Hello, > On Apr 9, 2020, at 3:23 PM, Zeev Pekar wrote: > > it would be nice to be able to sort (coreutils -> sort) Hebrew numerals: An interesting idea, but I think it is a bit too niche to be included in the coreutils “sort” program (tradeoff of usefulness vs bloat). H

bug#40530: feature proposal: coreutils -> sort: adding sorting ability for Hebrew numerals

2020-04-09 Thread Zeev Pekar
Hello, it would be nice to be able to sort (coreutils -> sort) Hebrew numerals: https://en.wikipedia.org/wiki/Hebrew_numerals#Cardinal_Values https://en.wikipedia.org/wiki/Hebrew_numerals#Calculations Normal alphabetic sort, almost does the job, except for values: 15, 16, 115, 116, 215, 216

bug#12427: Why does OpenSuSE disabled the default of allowing multi-core use in Coreutils 'sort'??

2012-09-12 Thread Paul Eggert
On 09/12/2012 02:59 PM, Linda Walsh wrote: > OpenSuSE's maintainer/integrator of the gnu sort package > believes it to be faulty That is not a correct summary of the email that you forwarded. That email merely said that he was not convinced that it works. If no bugs are known, there's no point to

bug#12427: Why does OpenSuSE disabled the default of allowing multi-core use in Coreutils 'sort'??

2012-09-12 Thread Eric Blake
On 09/12/2012 03:59 PM, Linda Walsh wrote: > OpenSuSE's maintainer/integrator of the gnu sort package > believes it to be faulty -- that's why I forwarded it here, > in hopes that his concerns would be heard/dealt with. Nothing can be dealt with if it is not first identified what needs to be dealt

bug#12427: Why does OpenSuSE disabled the default of allowing multi-core use in Coreutils 'sort'??

2012-09-12 Thread Eric Blake
On 09/12/2012 04:08 PM, Linda Walsh wrote: > >> >> Linda Walsh wrote: >> ... >>> Do you have reason to believe they have buggy code by default? >>> I'll Cc' the coreutils bug-list on thisand >> open a >>> bug-report << on this as should have been done originally, >>> an

bug#12427: Why does OpenSuSE disabled the default of allowing multi-core use in Coreutils 'sort'??

2012-09-12 Thread Linda Walsh
Linda Walsh wrote: ... Do you have reason to believe they have buggy code by default? I'll Cc' the coreutils bug-list on thisand >> open a bug-report << on this as should have been done originally, and maybe your questions can be addressed. Hi Linda, Do yo

bug#12427: Why does OpenSuSE disabled the default of allowing multi-core use in Coreutils 'sort'??

2012-09-12 Thread Linda Walsh
OpenSuSE's maintainer/integrator of the gnu sort package believes it to be faulty -- that's why I forwarded it here, in hopes that his concerns would be heard/dealt with. If the downstream maintain thinks there is a bug in sort, then isn't submitting that bug back up stream the correct thing to d

bug#12427: Why does OpenSuSE disabled the default of allowing multi-core use in Coreutils 'sort'??

2012-09-12 Thread Jim Meyering
tags 12427 notabug thanks Linda Walsh wrote: ... > Do you have reason to believe they have buggy code by default? > I'll Cc' the coreutils bug-list on this and open a bug-report on this as > should have been done originally, and maybe your questions can be addressed. Hi Linda, Do you reali

bug#12427: Why does OpenSuSE disabled the default of allowing multi-core use in Coreutils 'sort'??

2012-09-12 Thread Linda Walsh
Philipp Thomas wrote:from the changelog (where you could have looked yourself ...). I need to be convinced that sort threading works on all platforms openSUSE/SLES support in order to disable that patch. --- I wasn't aware that openSUSE supported all platforms. However the people who wrote so

bug#8559: [Bug Report] gnulib pthread detection prevents coreutils sort from linking

2011-04-26 Thread Gary V. Vaughan
ru64 with: ./configure CPPFLAGS=-D_REENTRANT ac_cv_search_pthread_create=-lpthread \ If I can help track down a better fix that allows pthreads to be detected properly on these host for coreutils sort and friends, please don't hesitate to ask. Cheers, -- Gary V. Vaughan (gary AT gnu DOT org)

Re: bug in coreutils sort

2006-10-23 Thread Bob Proulx
Vadim smelyansky wrote: > I tried to sort following strings and sort just keep them as is. I tried > all possible options and it is looks like dashes make some problem. I > think there is a bug in sort, because msort by William J. Poser did > sorted this list in proper way. Thank you for your r

bug in coreutils sort

2006-10-23 Thread Vadim smelyansky
Hi! I tried to sort following strings and sort just keep them as is. I tried all possible options and it is looks like dashes make some problem. I think there is a bug in sort, because msort by William J. Poser did sorted this list in proper way. moc.egagtromerom1.adirolf-egagtrom;69.25.189.2

Re: coreutils sort

2006-06-28 Thread Paul Eggert
Christian writes: > sort -nt. +0 -1 +1 -2 +2 -3 +3 -4 > ... > I've been using that command syntax to sort IP's for several years... Come to think of it, GNU sort could support that syntax even when asked to have POSIX 1003.1-2001 semantics, so long as argument reordering is in effect, since as fa

Re: coreutils sort

2006-06-27 Thread Bob Proulx
gt; and here is the error: > > sort: invalid option -- 1 > Try `sort --help' for more information. Better yet would be to see the info documentation for significantly more information. info coreutils sort On older systems, `sort' supports an obsolete origin-zero s

coreutils sort

2006-06-27 Thread Christian
Hello, I've got a question about sort. I've got a gentoo based system and I noticed that my usually command to sort IP addresses does not seem to work anymore. I know for sure that it doesn't work with 5.94 and 5.97. This is the command: sort -nt. +0 -1 +1 -2 +2 -3 +3 -4 and here is the error:

Re: coreutils man pages "info sort" -> "info coreutils sort"

2005-09-29 Thread ThMO
Hello Paul and others listening, > > The neccessary parameter is: --info-page="coreutils $*" > > That way the man-page clearly state the command to type as: > > info coreutils > > without the need to name each command inside the info/dir file explicitely. > > Thanks for the suggestion. So, I

Re: coreutils man pages "info sort" -> "info coreutils sort"

2005-09-29 Thread ThMO
Hello Jim, Paul and others listening, > [...] > > Jim, what do you think? > > We've been around the block a few times with Debian, > trying to do just that, but there's at least one problem: > > `info coreutils pr' would display the `printing text' > section of the manual, not the one on `pr

Re: coreutils man pages "info sort" -> "info coreutils sort"

2005-09-29 Thread Jim Meyering
;d be happy to change it. > 2005-09-29 Paul Eggert <[EMAIL PROTECTED]> > > * man/Makefile.am (.x.1): Have the sort man page suggest "info > coreutils sort" rather than "info sort", and similarly for the > other man pages. Suggested by ___ Bug-coreutils mailing list Bug-coreutils@gnu.org http://lists.gnu.org/mailman/listinfo/bug-coreutils

coreutils man pages "info sort" -> "info coreutils sort"

2005-09-29 Thread Paul Eggert
e suggestion. So, I take it that you'd favor a patch like the following? This looks good to me. Jim, what do you think? 2005-09-29 Paul Eggert <[EMAIL PROTECTED]> * man/Makefile.am (.x.1): Have the sort man page suggest "info coreutils sort" rather than &qu

Re: coreutils "sort -b -kSTART, END.ENDCHAR" incompatibility with POSIX

2004-04-26 Thread Jim Meyering
Paul Eggert <[EMAIL PROTECTED]> wrote: > Yesterday's email exchange with Stuart Allsop caused me to discover a > longstanding bug in coreutils "sort". This bug causes "sort" to be > incompatible with both POSIX and traditional Unix sort. Here's a

coreutils "sort -b -kSTART,END.ENDCHAR" incompatibility with POSIX

2004-04-25 Thread Paul Eggert
Yesterday's email exchange with Stuart Allsop caused me to discover a longstanding bug in coreutils "sort". This bug causes "sort" to be incompatible with both POSIX and traditional Unix sort. Here's a proposed patch. 2004-04-25 Paul Eggert <[EMAIL PROTECTED