search

idank / explainshell

match command-line arguments to their help text
GNU General Public License v3.0
13.29k stars 794 forks source link

Redos option fix #290

Closed theWorstComrade closed 2 years ago

theWorstComrade commented 2 years ago

https://huntr.dev/bounties/c85354c7-4490-4fad-a32c-03f9f4bdcb63/

stoivo commented 2 years ago

What does it fix? The report is not public?

idank commented 2 years ago

An inefficiency in a regular expression can cause high parse times. @theWorstComrade can you open up the report? I think it's fine.

theWorstComrade commented 2 years ago

@idank @stoivo As far as I know, the huntr platform does not give me possibility to disclose the report. This happens automatically when the bug is marked as fixed.

Printed version: Inefficient Regular Expression Complexity vulnerability found in explainshell.pdf

idank commented 2 years ago

merged after squashing, thanks