make - Bugs: bug #45049, Invalid read / heap overflow in...

Group

Main
- Main
- View members
- Search
Homepage
Download
Docs
Support
- ~~Submit new~~
- Browse
- Reset to open
- Digest
- Dependencies
- ~~Export~~
- Get statistics
- Search
Mailing lists
Source code
Bugs
- Submit new
- Browse
- Reset to open
- Digest
- Dependencies
- ~~Export~~
- Get statistics
- Search
Patches
- ~~Submit new~~
- Browse
- Reset to open
- Digest
- Dependencies
- ~~Export~~
- Get statistics
- Search
News
- Browse
- Atom feed
- ~~Submit~~
- ~~Manage~~

bug #45049: Invalid read / heap overflow in function parse_variable_definition()

Submitter:	Hanno Boeck <hanno>
Submitted:	Thu 07 May 2015 10:10:49 PM UTC


Severity:	3 - Normal	Item Group:	None
Status:	Fixed	Privacy:	Public
Assigned to:	psmith	Open/Closed:	Closed
Component Version:	4.1	Operating System:	None
Fixed Release:	4.2	Triage Status:	None

* Mandatory Fields

Add a New Comment Rich Markup

Mon 13 Jul 2015 04:15:25 AM UTC, comment #1: I pushed a fix for this to Git. Thanks for the report!	Paul D. Smith <psmith>
Thu 07 May 2015 10:10:49 PM UTC, original submission: Attached sample file (which is just a $ character) will cause an invalid read / heap overflow in make. This can be seen with either address sanitizer or valgrind. I've attached full address sanitizer output. This was found with the tool american fuzzy lop.	Hanno Boeck <hanno>

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:


Comment:

Attached Files

file #33958: Makefile.heapoverflow-parse_variable_definition added by hanno (1B - application/octet-stream)

file #33959: Makefile.heapoverflow-parse_variable_definition.asan.txt added by hanno (3KiB - text/plain)

Depends on the following items: None found

Items that depend on this one: None found

Carbon-Copy List

-email is unavailable- added by psmith (Posted a comment)

-email is unavailable- added by hanno (Submitted the item)

There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

Only logged-in users can vote.

Please enter the title of George Orwell's famous dystopian book (it's a date):

Follow 7 latest changes.

Date	Changed by	Updated Field	Previous Value	Replaced by
2015-07-13	psmith	Status	None	Fixed
		Assigned to	None	psmith
		Open/Closed	Open	Closed
		Component Version	None	4.1
		Fixed Release	None	4.2
2015-05-07	hanno	Attached File	-	Added Makefile.heapoverflow-parse_variable_definition, #33958
		Attached File	-	Added Makefile.heapoverflow-parse_variable_definition.asan.txt, #33959

make - Bugs: bug #45049, Invalid read / heap overflow in...

bug #45049: Invalid read / heap overflow in function parse_variable_definition()

<a href="#postcomment">Post a Comment</a>

<a href="#discussion">Discussion</a>

<a href="#attached">Attached Files</a>

<a href="#dependencies">Dependencies</a>

<a href="#cc">Mail Notification Carbon-Copy List</a>

<a href="#votes">Votes</a>

<a href="#history">History</a>