bigdecimal-segfault-fix

h1. BigDecimal Segfault Fix ruby의 BigDecimal 라이브러리에 세그폴트segfault 버그가 있으며, 사용자가 알려진 잘못된 값을 입력하면 트리거될 수 있습니다. 애플리케이션이 안전한지 테스트하려면 +example.rb+를 실행하세요. 이 스크립트는 정상적으로 종료되어야 하며 세그폴트가 발생하지 않아야 합니다. 이 해결책에는 부작용이 있습니다. 특히 BigDecimal을 사용하여 큰 숫자255자리 이상를 처리하거나 과학적 표기법예: 5000000을 "5E6"으로 숫자를 제공하는 것을 방지합니다...

ruby: memory corruption in BigDecimal on 64bit platforms

The VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier, as used on Apple Mac OS X before 10.6.7 and other platforms, does not properly allocate memory, which allows context-dependent attackers to execute arbitrary code or cause a denial of service applicati...

ruby: memory corruption in BigDecimal on 64bit platforms

The VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier, as used on Apple Mac OS X before 10.6.7 and other platforms, does not properly allocate memory, which allows context-dependent attackers to execute arbitrary code or cause a denial of service applicati...

EUVD-2011-0214

Malware in sbrugna...

SUSE CVE-2011-0188

The VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier, as used on Apple Mac OS X before 10.6.7 and other platforms, does not properly allocate memory, which allows context-dependent attackers to execute arbitrary code or cause a denial of service applicati...

CVE-2011-0188

The VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier, as used on Apple Mac OS X before 10.6.7 and other platforms, does not properly allocate memory, which allows context-dependent attackers to execute arbitrary code or cause a denial of service applicati...