[pcre-dev] [Bug 2006] New: Stack Overflow in match()

https://bugs.exim.org/show_bug.cgi?id=2006

            Bug ID: 2006
           Summary: Stack Overflow in match()
           Product: PCRE
           Version: N/A
          Hardware: x86-64
                OS: Linux
            Status: NEW
          Severity: bug
          Priority: medium
         Component: Code
          Assignee: ph10@???
          Reporter: fumfi.255@???
                CC: pcre-dev@???

Created attachment 965
--> https://bugs.exim.org/attachment.cgi?id=965&action=edit
POC to trigger Stack Overflow (pcre2test)

Affected:
- PCRE2 version 10.23-RC1 2016-08-01 (SVN revision: 634)

To reproduce the problem (pcre2test):
pcre2test pcre2_stack_overflow_match /dev/null

ASAN output:

==16669==ERROR: AddressSanitizer: stack-overflow on address 0x7fff8b30bde0 (pc
0x7feae9e53268 bp 0x7fff8b30c460 sp 0x7fff8b30bde0 T0)
    #0 0x7feae9e53267 in match XYZ/pcre2/src/pcre2_match.c:578
    #1 0x7feae9e9d279 in match XYZ/pcre2/src/pcre2_match.c:1017:9
    #2 0x7feae9e8ba46 in match XYZ/pcre2/src/pcre2_match.c:2128:7
    ######################### === SNIP! === #####################
    #251 0x7feae9e9d279 in match XYZ/pcre2/src/pcre2_match.c:1017:9

SUMMARY: AddressSanitizer: stack-overflow XYZ/pcre2/src/pcre2_match.c:578 in
match
==16669==ABORTING

--
You are receiving this mail because:
You are on the CC list for the bug.