FYI - bash crash due to asprintf bug

[Eric Blake]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I found that I could crash bash due to an off-by-one bug in asprintf().  I
will be submitting a patch to newlib shortly, that both fixes the
off-by-one behavior, and reduces asprintf's use of realloc from quadratic
to log-linear performance (ie. calling realloc every time you add a byte
is bad, compared to doubling the buffer size every time you call realloc).
 But that means that until the next cygwin release, all programs compiled
against cygwin's asprintf are vulnerable.

- --
Life is short - so eat dessert first!

Eric Blake             ebb9@byu.net
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Cygwin)
Comment: Public key at home.comcast.net/~ericblake/eblake.gpg
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFbPfZ84KuGfSFAYARAp7xAKCdKmcipaYeaMxIaCT6+vwTh+bfvwCg0e2n
KKQzAfoEyT4KpmYYsIB3Id0=
=iNQL
-----END PGP SIGNATURE-----

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/