ShellCheck
A shell script static analysis tool. The goals of ShellCheck are to point out and clarify typical:
• syntax issues that cause a shell to give cryptic error messages.
• semantic problems that cause a shell to behave strangely and counter-intuitively.
• subtle caveats, corner cases and pitfalls that may cause an otherwise working script to fail under future circumstances.
It also comes with a web tool.
🔗 https://www.shellcheck.net
🌐 https://github.com/koalaman/shellcheck
#opensource #shell #bash #sh #linter #haskell #dev #console #cli #linux
A shell script static analysis tool. The goals of ShellCheck are to point out and clarify typical:
• syntax issues that cause a shell to give cryptic error messages.
• semantic problems that cause a shell to behave strangely and counter-intuitively.
• subtle caveats, corner cases and pitfalls that may cause an otherwise working script to fail under future circumstances.
It also comes with a web tool.
#opensource #shell #bash #sh #linter #haskell #dev #console #cli #linux
Please open Telegram to view this post
VIEW IN TELEGRAM
CVE-2023-52440:
Linux kernel ksmbd: slub overflow in ksmbd_decode_ntlmssp_auth_blob function.
If
- patch commit
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2023-4130:
Linux kernel ksmbd: wrong next length validation of
There are multiple
ksmbd will then find next
ksmbd should check buffer length using
- patch commit
#cve #linux
Linux kernel ksmbd: slub overflow in ksmbd_decode_ntlmssp_auth_blob function.
If
authblob->SessionKey.Length is bigger than session key size (CIFS_KEY_SIZE), slub overflow can happen in key exchange codes. cifs_arc4_crypt copy to session key array from SessionKey of client.- patch commit
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CVE-2023-4130:
Linux kernel ksmbd: wrong next length validation of
ea buffer in smb2_set_ea function.There are multiple
smb2_ea_info buffers in FILE_FULL_EA_INFORMATION request from client.ksmbd will then find next
smb2_ea_info using ->NextEntryOffset of current smb2_ea_info. ksmbd needs to validate buffer length before accessing the next ea.ksmbd should check buffer length using
buf_len, not the next variable. next variable is the start offset of current ea that got from previous ea.- patch commit
#cve #linux