[pcre-dev] [Bug 2050] New: two memory allocation failure in …

Góra strony
Delete this message
Autor: admin
Data:  
Dla: pcre-dev
Temat: [pcre-dev] [Bug 2050] New: two memory allocation failure in pcretest.c
https://bugs.exim.org/show_bug.cgi?id=2050

            Bug ID: 2050
           Summary: two memory allocation failure in pcretest.c
           Product: PCRE
           Version: 8.40
          Hardware: x86-64
                OS: Linux
            Status: NEW
          Severity: bug
          Priority: medium
         Component: Code
          Assignee: ph10@???
          Reporter: ago@???
                CC: pcre-dev@???


Created attachment 990
--> https://bugs.exim.org/attachment.cgi?id=990&action=edit
stacktrace 1

Hello,

I found two memory allocation failure through fuzzing.

These types of warnings are generated from ASan when the program needs more
than 64GB of memory.
In a normal circumstance ( so when the build was not compiled with asan/debug )
you may see nothing strange, so it can be a false positive.

It was tested on version 8.40, compiled with clang-3.9.1

Output, included stacktrace in attachment.

Command to reproduce:
# pcretest -16 -d $FILE

Reproducer for stacktrace 1:
https://github.com/asarubbo/poc/blob/master/00201-pcre-memallocfailure-pcretest

Reproducer for stacktrace 2:
https://github.com/asarubbo/poc/blob/master/00202-pcre-memallocfailure2-pcretest

( I know that is preferable attach reproducer here, but these link won't expire
in the future )

--
You are receiving this mail because:
You are on the CC list for the bug.