HEX
Server: Apache/2.4.68 (codeit) OpenSSL/4.0.1
System: Linux societies-web 5.4.17-2136.353.3.el8uek.x86_64 #3 SMP Thu Feb 12 09:46:56 PST 2026 x86_64
User: yles (1028)
PHP: 8.3.31
Disabled: exec,shell_exec,passthru,system,proc_open,popen,curl_exec,curl_multi_exec,parse_ini_file,show_source,symlink,pcntl_exec
Upload Files
File: //usr/bin/abrt-action-analyze-vulnerability
#!/bin/sh

# Do we have the tools we need?
# If no, exit silently.
command -v /usr/libexec/gdb >/dev/null 2>&1 || exit 0
command -v eu-readelf >/dev/null 2>&1 || exit 0

# Do we have coredump?
test -r coredump || {
    echo 'No file "coredump" in current directory' >&2
    exit 1
}

# Find "cursig: N" and extract N.
# This gets used by abrt-exploitable as a fallback
# if gdb and/or kernel is uncooperative.
# "grep -m1": take the first match (on Linux, every thread has its own
# prstatus struct in the coredump, but the signal number which killed us
# must be the same in all these structs).
SIGNO_OF_THE_COREDUMP=$(eu-readelf -n coredump | grep -m1 -o 'cursig: *[0-9]*' | sed 's/[^0-9]//g')
export SIGNO_OF_THE_COREDUMP

# Run gdb, hiding its messages. Example:
#   Missing separate debuginfo for the main executable file
#   Core was generated by...
#   Program terminated with signal 11, Segmentation fault.
#   #0  0x09fa5348 in ?? ()
# We don't want to see all this.
# abrt-exploitable plugin is instructed to create ./exploitable file
# with explanation if severity is >= 4
GDBOUT=$(
/usr/libexec/gdb --batch \
    -ex 'python exec(open("/usr/libexec/abrt-gdb-exploitable").read())' \
    -ex 'core-file ./coredump' \
    -ex 'abrt-exploitable 4 ./exploitable' \
    2>&1 \
) && exit 0

# There was an error. Show the messages.
printf "Error while running gdb:\n%s\n" "$GDBOUT"
exit 1