bug#26227: grep critical local DoS from userspace

[Jim Meyering]

tags 26227 moreinfo
done

On Thu, Mar 23, 2017 at 12:11 PM,  <address@hidden> wrote:
> Today I searched some files and... my server goes to hell (crash).
>
> replication:
>
> 0. log into root or user account (whatever)
> 1. make a huge empty file (eg. 10 GB of zeros)
> (my is: -rw-r--r-- 1 root root 10485760000 Feb 28 18:14 testfile.out)
> 2. grep -Hi "\/tmp\/" * 2>/dev/null
> 3. crash (probably due to out of memory)

Thanks for the report, but...
What version of grep are you using? The latest (grep-3.0) operates
pretty quickly, and doesn't even use 3MB of RSS:

  $ dd status=none bs=1M count=10000 of=big < /dev/zero && env time
grep -l x big
  3.69user 1.10system 0:04.81elapsed 99%CPU (0avgtext+0avgdata 2388maxresident)k
  0inputs+0outputs (0major+102minor)pagefaults 0swaps