[tex-live] command line tools crash / buffer overflow with many parameters (mfplain/mpost)

[Enrico Gregorio]

> On 19 Jan 2019, at 13:41 , Hanno Böck <hanno at hboeck.de> wrote:
> 
> Hi,
> 
> Some of the commandline tools in texlive crash if you call them with
> many parameters:
> 
> mfplain $(seq 1 2000)
> mpost $(seq 1 2000)
> 
> It's a buffer overflow.

As far as I can see, the overflow happens with more than 209
characters in the command line. The expected error message
(file not found) is obtained with

mpost $(seq -w 1 69) 1

but I get a segmentation fault with

mpost $(seq -w 1 69) 12

The same with mf.

Ciao
Enrico