Bug 691321

Summary:	Crash backtracking over unicode sequence
Product:	Red Hat Enterprise Linux 6	Reporter:	Petr Pisar <ppisar>
Component:	pcre	Assignee:	Petr Pisar <ppisar>
Status:	CLOSED WONTFIX	QA Contact:	BaseOS QE Security Team <qe-baseos-security>
Severity:	medium	Docs Contact:
Priority:	low
Version:	6.1	CC:	lkundrak, ppisar
Target Milestone:	rc
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
URL:	http://bugs.exim.org/show_bug.cgi?id=1100
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:	691319	Environment:
Last Closed:	2014-10-21 11:37:14 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Petr Pisar 2011-03-28 08:57:39 UTC

+++ This bug was initially created as a clone of Bug #691319 +++

There is an invalid access to memory when backtracking an multi-byte string reported to upstream (http://bugs.exim.org/show_bug.cgi?id=1100); pcretest reproducer:

/^S\X*e\X* *$/E8
Stéréo

F16--13 (pcre-8.12-2--pcre-7.8-3) affected.
-----

RHEL-6.1 (pcre-7.8-3.1.el6) affected too.

Comment 2 RHEL Program Management 2011-03-28 09:17:44 UTC

This request was evaluated by Red Hat Product Management for
inclusion in the current release of Red Hat Enterprise Linux.
Because the affected component is not scheduled to be updated
in the current release, Red Hat is unfortunately unable to
address this request at this time. Red Hat invites you to
ask your support representative to propose this request, if
appropriate and relevant, in the next release of Red Hat
Enterprise Linux. If you would like it considered as an
exception in the current release, please ask your support
representative.

Comment 3 Petr Pisar 2014-10-21 11:37:14 UTC

Porting the fix is very difficult. Because nobody complained so far, I will postpone fixing this bug.