bugmake - Bugs: bug #45049, Invalid read / heap overflow in...

 
 

bug #45049: Invalid read / heap overflow in function parse_variable_definition()

Submitter:  Hanno Boeck <hanno>
Submitted:  Thu 07 May 2015 10:10:49 PM UTC
   
 
Severity:  3 - Normal Item Group:  None
Status:  Fixed Privacy:  Public
Assigned to:  psmith Open/Closed:  Closed
Component Version:  4.1 Operating System:  None
Fixed Release:  4.2 Triage Status:  None
* Mandatory Fields

Add a New Comment Rich Markup
   

Mon 13 Jul 2015 04:15:25 AM UTC, comment #1: 

I pushed a fix for this to Git.  Thanks for the report!

Paul D. Smith <psmith>
Group administrator
Thu 07 May 2015 10:10:49 PM UTC, original submission:  

Attached sample file (which is just a $ character) will cause an invalid read / heap overflow in make.

This can be seen with either address sanitizer or valgrind. I've attached full address sanitizer output.

This was found with the tool american fuzzy lop.

Hanno Boeck <hanno>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by psmith (Posted a comment)
  • -email is unavailable- added by hanno (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follow 7 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2015-07-13 psmith StatusNone Fixed
        Assigned toNone psmith
        Open/ClosedOpen Closed
        Component VersionNone 4.1
        Fixed ReleaseNone 4.2
    2015-05-07 hanno Attached File- Added Makefile.heapoverflow-parse_variable_definition, #33958
        Attached File- Added Makefile.heapoverflow-parse_variable_definition.asan.txt, #33959

    Back to the top

    Powered by Savane 3.13-758e.
    Corresponding source code