https://bugs.exim.org/show_bug.cgi?id=2050
Bug ID: 2050
Summary: two memory allocation failure in pcretest.c
Product: PCRE
Version: 8.40
Hardware: x86-64
OS: Linux
Status: NEW
Severity: bug
Priority: medium
Component: Code
Assignee: ph10@???
Reporter: ago@???
CC: pcre-dev@???
Created attachment 990
-->
https://bugs.exim.org/attachment.cgi?id=990&action=edit
stacktrace 1
Hello,
I found two memory allocation failure through fuzzing.
These types of warnings are generated from ASan when the program needs more
than 64GB of memory.
In a normal circumstance ( so when the build was not compiled with asan/debug )
you may see nothing strange, so it can be a false positive.
It was tested on version 8.40, compiled with clang-3.9.1
Output, included stacktrace in attachment.
Command to reproduce:
# pcretest -16 -d $FILE
Reproducer for stacktrace 1:
https://github.com/asarubbo/poc/blob/master/00201-pcre-memallocfailure-pcretest
Reproducer for stacktrace 2:
https://github.com/asarubbo/poc/blob/master/00202-pcre-memallocfailure2-pcretest
( I know that is preferable attach reproducer here, but these link won't expire
in the future )
--
You are receiving this mail because:
You are on the CC list for the bug.
