[hardening-discuss] Bug#462682: hardened-c++: dies due to "Nested quantifiers in regex"

Aaron M. Ucko ucko at debian.org
Sat Jan 26 20:42:06 UTC 2008


Package: hardening-wrapper
Version: 1.4
Severity: important

hardened-c++'s attempt to check for being run directly (rather than
as, say, g++) backfires due to insufficient quoting:

$ g++ -dumpversion
Nested quantifiers in regex; marked by <-- HERE in m/hardened-c++ <-- HERE $/ at /usr/bin/g++ line 74.

To avoid this problem, please either rework the logic to use substr,
pre-quote $self, or surround its uses with \Q ... \E to account for
the embedded + characters.

Thanks!

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.23.14 (SMP w/2 CPU cores)
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)
Shell: /bin/sh linked to /bin/bash

Versions of packages hardening-wrapper depends on:
ii  g++                           4:4.2.2-2  The GNU C++ compiler
ii  gcc                           4:4.2.2-2  The GNU C compiler
ii  perl                          5.8.8-12   Larry Wall's Practical Extraction 

hardening-wrapper recommends no packages.

-- no debconf information





More information about the hardening-discuss mailing list