https://bugs.exim.org/show_bug.cgi?id=2046
Bug ID: 2046
Summary: left shift and signed integer overflow in pcretest.c
Product: PCRE
Version: 8.40
Hardware: x86-64
OS: Linux
Status: NEW
Severity: bug
Priority: medium
Component: Code
Assignee: ph10@???
Reporter: ago@???
CC: pcre-dev@???
Created attachment 986
-->
https://bugs.exim.org/attachment.cgi?id=986&action=edit
stacktrace
Hello,
I found a left shift and signed integer overflow through fuzzing.
One of the two signed integer overflow (pcretest.c:4837:34) was already
reported in bug 2044. This provided testcase is able to reach the reported bug
too.
It was tested on version 8.40, compiled with clang-3.9.1
Since pcre_jit_compile.c is part of the library you can consider this a
security bug and change the severity
Output, included stacktrace in attachment.
Command to reproduce:
# pcretest -16 -d $FILE
Reproducer:
( I know that is preferable attach reproducer here, but this link won't expire
in the future )
--
You are receiving this mail because:
You are on the CC list for the bug.
