Bug 720652

Summary:	[PATCH] large string repeat count causes heap corruption
Product:	Red Hat Enterprise Linux 6	Reporter:	Jim Meyering <meyering>
Component:	perl	Assignee:	perl-maint-list
Status:	CLOSED DUPLICATE	QA Contact:	BaseOS QE - Apps <qe-baseos-apps>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	6.2	CC:	cweyl, iarnell, kasal, lkundrak, mmaslano, ppisar, psabata, rc040203, tcallawa
Target Milestone:	rc
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:	720610	Environment:
Last Closed:	2011-07-12 12:46:12 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Jim Meyering 2011-07-12 11:41:18 UTC

+++ This bug was initially created as a clone of Bug #720610 +++

Created attachment 512377 [details]
proposed patch

Description of problem: string repeat count > 2^31 causes heap corruption

Version-Release number of selected component (if applicable):
perl-5.10.1-119.el6.x86_64

How reproducible: every time

Steps to Reproduce:
1. perl -le 'print "v"x(2**31+1)'| head -10c |cat -A
2.
3.
  
Actual results:
a single "v" and arbitrary data from uninitialized heap

Expected results:
2^31+1 'v's followed by a newline on output

Additional info:
    http://thread.gmane.org/gmane.comp.lang.perl.perl5.porters/96812
    https://rt.perl.org/rt3/Ticket/Display.html?id=94560

Patch attached.

Comment 2 RHEL Program Management 2011-07-12 11:58:12 UTC

This request was evaluated by Red Hat Product Management for
inclusion in the current release of Red Hat Enterprise Linux.
Because the affected component is not scheduled to be updated
in the current release, Red Hat is unfortunately unable to
address this request at this time. Red Hat invites you to
ask your support representative to propose this request, if
appropriate and relevant, in the next release of Red Hat
Enterprise Linux. If you would like it considered as an
exception in the current release, please ask your support
representative.

Comment 3 Petr Pisar 2011-07-12 12:46:12 UTC


*** This bug has been marked as a duplicate of bug 720644 ***