[Bug 993919] Re: grub-fstest "--length" flag segmentation fault

[Marc Deslauriers]

Thanks for taking the time to report this bug and helping to make Ubuntu
better. We appreciate the difficulties you are facing, but this appears
to be a "regular" (non-security) bug.  I have unmarked it as a security
issue since this bug does not show evidence of allowing attackers to
cross privilege boundaries nor directly cause loss of data/privacy.
Please feel free to report any other bugs you may find.

** Visibility changed to: Public

** This bug is no longer flagged as a security vulnerability

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to grub in Ubuntu.
https://bugs.launchpad.net/bugs/993919

Title:
  grub-fstest "--length" flag segmentation fault

Status in “grub” package in Ubuntu:
  New

Bug description:
  A segmentation fault can be triggered in the grub-fstest application provided by the grub package.
  Specifically providing any parameter that isn't an integer to the "--length" flag as per the following terminal command will cause a segmentation fault:

  grub-fstest --length=A

  This doesn't appear to allow for the overwriting of stack registers,
  however, I have not had the chance to look at it in any detail.

  Regards,

  Sasha Zivojinovic

  lsb_release -rd
  Description:	Ubuntu 12.04 LTS
  Release:	12.04

  
  apt-cache policy grub
  grub:
    Installed: (none)
    Candidate: 0.97-29ubuntu66
    Version table:
       0.97-29ubuntu66 0
          500 http://gb.archive.ubuntu.com/ubuntu/ precise/main i386 Packages

  ProblemType: Bug
  DistroRelease: Ubuntu 12.04
  Package: grub (not installed)
  ProcVersionSignature: Ubuntu 3.2.0-24.37-generic-pae 3.2.14
  Uname: Linux 3.2.0-24-generic-pae i686
  ApportVersion: 2.0.1-0ubuntu7
  Architecture: i386
  Date: Thu May  3 12:30:23 2012
  EcryptfsInUse: Yes
  InstallationMedia: Ubuntu 11.10 "Oneiric Ocelot" - Release i386 (20111012)
  ProcEnviron:
   LANGUAGE=en_GB:en
   TERM=xterm
   PATH=(custom, no user)
   LANG=en_GB.UTF-8
   SHELL=/bin/bash
  SourcePackage: grub
  UpgradeStatus: Upgraded to precise on 2012-03-30 (33 days ago)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub/+bug/993919/+subscriptions