Bug#893497: buffer overflow in column(1)

2019-09-01 Thread Julian Brost
I just ran into the same problem and found that this happens due to column_maxline.diff which allocates a buffer that is too small because it implicitly assumes sizeof(wchar_t) == 2 which is wrong. The attached patch should fix this issue. From 4fbb900f04fd737d6422b613ada7034249fec5fc Mon Sep 17 0

Bug#893497: buffer overflow in column(1)

2018-03-19 Thread Leif Ryge
Package: bsdmainutils Version: 9.0.12+nmu1 There is a buffer overflow in the column(1) command. One way to trigger it is to give it 512KB of zeroes: $ cat /dev/zero|head -c 524288 |column *** buffer overflow detected ***: column terminated === Backtrace: = /lib/x86_64-linux-gnu/libc.