/usr/bin/a2p buffer overflow

Posted by up201407890 on Dec 29

$ echo @alunos.dcc.fc.up|sed ‘s/^/up201407890/g;s/$/.pt/g’

I have found what it appears to be a buffer overflow on the a2p (awk2perl)
utility. It comes by default on several different systems.

Tested on Fedora 20, Fedora 19, Debian, and works probably on every other
UNIX-like.

Eg:

[saken () zippy ~]$ python -c “print ‘A’ * 2048” | a2p >/dev/null
[saken () zippy ~]$ python -c “print ‘A’ *…

Leave a Reply