[bug #64229] [troff] I haz a DoS attack

[G. Branden Robinson]

URL:
  <https://savannah.gnu.org/bugs/?64229>

                 Summary: [troff] I haz a DoS attack
                   Group: GNU roff
               Submitter: gbranden
               Submitted: Sun 21 May 2023 03:29:57 PM UTC
                Category: Core
                Severity: 4 - Important
              Item Group: Crash/Unresponsive
                  Status: None
                 Privacy: Public
             Assigned to: None
             Open/Closed: Open
         Discussion Lock: Any
         Planned Release: None


    _______________________________________________________

Follow-up Comments:


-------------------------------------------------------
Date: Sun 21 May 2023 03:29:57 PM UTC By: G. Branden Robinson <gbranden>
Affects _groff_ 1.22.4.  Maybe every _groff_ ever.

Also Heirloom Doctools _nroff_.[1]

Also DWB 3.3 _nroff_.

Maybe every _*roff_ ever...


$ { printf '.di foo\n.nf\n'; yes abcdefghijklm; } | nroff
groff: troff: Signal 9


[1] Well, I _think_ so...its resident set size is at 1.7 GB and growing
without apparent bound but it is _way_ slower at it than groff (27 seconds) or
DWB (1 minute 32 seconds), which got killed by the kernel after a couple of
minutes.  Heirloom is still grinding after 20 minutes.  So they may have a
whole 'nother problem besides this one.







    _______________________________________________________

Reply to this item at:

  <https://savannah.gnu.org/bugs/?64229>

_______________________________________________
Message sent via Savannah
https://savannah.gnu.org/