aa3786b9b6
This should fix the bug described in CVE-2012-5667 when an input line is so long that its length cannot be stored in an int variable. This change to NetBSD's version of GNU grep 2.5.1 (licenced under GPLv2) was made without direct reference to any code licenced under GPLv3. Thanks to Ignatios Souvatzis for looking at GPLv3-derived patches and describing the problem in general terms. Thanks to pkgsrc/devel/coccinelle for helping me find places where int variables were used to store the results from pointer arithmetic or strlen(). Thanks to Martin Husemann for testing. |
||
---|---|---|
.. | ||
doc | ||
intl | ||
lib | ||
po | ||
src | ||
ABOUT-NLS | ||
aclocal.m4 | ||
AUTHORS | ||
autogen.sh | ||
ChangeLog | ||
config.guess | ||
config.hin | ||
config.sub | ||
configure | ||
configure.in | ||
COPYING | ||
depcomp | ||
grep2netbsd | ||
grep.spec | ||
INSTALL | ||
install-sh | ||
Makefile.am | ||
Makefile.cvs | ||
Makefile.in | ||
missing | ||
mkinstalldirs | ||
NEWS | ||
README | ||
README-alpha | ||
README.DOS | ||
stamp-h.in | ||
THANKS | ||
TODO |
This is GNU grep, the "fastest grep in the west" (we hope). All bugs reported in previous releases have been fixed. Many exciting new bugs have probably been introduced in this revision. GNU grep is provided "as is" with no warranty. The exact terms under which you may use and (re)distribute this program are detailed in the GNU General Public License, in the file COPYING. GNU grep is based on a fast lazy-state deterministic matcher (about twice as fast as stock Unix egrep) hybridized with a Boyer-Moore-Gosper search for a fixed string that eliminates impossible text from being considered by the full regexp matcher without necessarily having to look at every character. The result is typically many times faster than Unix grep or egrep. (Regular expressions containing backreferencing will run more slowly, however.) See the files AUTHORS and THANKS for a list of authors and other contributors. See the file INSTALL for compilation and installation instructions. See the file NEWS for a description of major changes in this release. See the file TODO for ideas on how you could help us improve grep. Send bug reports to bug-gnu-utils@gnu.org. Be sure to include the word "grep" in your Subject: header field.