[PATCH 1/2] Revert "ash: use alloca to get rid of setjmp"

Rich Felker dalias at libc.org
Wed Jul 22 03:19:30 UTC 2015


On Sun, Jul 19, 2015 at 11:07:13PM +0200, Denys Vlasenko wrote:
> I would rather keep it.
> 
> What is the "most horrible" thing which can happen here?

Arbitrary code execution due to stack overflow. Does this really need
a PoC? alloca is _always_ unsafe unless the argument is bounded and
tiny.

Rich


More information about the busybox mailing list