[hardening-discuss] Bug#462682: hardened-c++: dies due to "Nested quantifiers in regex"
Aaron M. Ucko
ucko at debian.org
Sat Jan 26 20:42:06 UTC 2008
Package: hardening-wrapper
Version: 1.4
Severity: important
hardened-c++'s attempt to check for being run directly (rather than
as, say, g++) backfires due to insufficient quoting:
$ g++ -dumpversion
Nested quantifiers in regex; marked by <-- HERE in m/hardened-c++ <-- HERE $/ at /usr/bin/g++ line 74.
To avoid this problem, please either rework the logic to use substr,
pre-quote $self, or surround its uses with \Q ... \E to account for
the embedded + characters.
Thanks!
-- System Information:
Debian Release: lenny/sid
APT prefers unstable
APT policy: (500, 'unstable'), (500, 'testing'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.23.14 (SMP w/2 CPU cores)
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)
Shell: /bin/sh linked to /bin/bash
Versions of packages hardening-wrapper depends on:
ii g++ 4:4.2.2-2 The GNU C++ compiler
ii gcc 4:4.2.2-2 The GNU C compiler
ii perl 5.8.8-12 Larry Wall's Practical Extraction
hardening-wrapper recommends no packages.
-- no debconf information
More information about the hardening-discuss
mailing list