Bug 691325

Summary:	Crash backtracking over unicode sequence
Product:	Red Hat Enterprise Linux 5	Reporter:	Petr Pisar <ppisar>
Component:	pcre	Assignee:	Petr Pisar <ppisar>
Status:	CLOSED CANTFIX	QA Contact:	BaseOS QE Security Team <qe-baseos-security>
Severity:	medium	Docs Contact:
Priority:	low
Version:	5.7	CC:	lkundrak, ppisar
Target Milestone:	rc
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
URL:	http://bugs.exim.org/show_bug.cgi?id=1100
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:	691319	Environment:
Last Closed:	2013-03-05 17:08:28 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Petr Pisar 2011-03-28 09:02:20 UTC

+++ This bug was initially created as a clone of Bug #691319 +++

There is an invalid access to memory when backtracking an multi-byte string reported to upstream (http://bugs.exim.org/show_bug.cgi?id=1100); pcretest reproducer:

/^S\X*e\X* *$/E8
Stéréo

F16--13 (pcre-8.12-2--pcre-7.8-3) affected.
-------
RHEL-5.7 (pcre-6.6-6.el5_6.1) affected too.

Comment 1 Petr Pisar 2013-03-05 17:08:28 UTC

I cannot fix this problem.