bugCompact Disc Input and Control Library - Bugs: bug #45013, malformed iso crashes iso-info /...

 
 

bug #45013: malformed iso crashes iso-info / invalid memory access

Submitted by:  Hanno Boeck <hanno>
Submitted on:  Tue 05 May 2015 06:52:29 AM UTC  
 
Category: run-time errorSeverity: 5 - Average
Item Group: libiso9660Status: Fixed
Privacy: PublicAssigned to: Rocky Bernstein <rocky>
Open/Closed: Closed

Add a New Comment(Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Fri 08 May 2015 10:58:17 AM UTC, comment #2:

Fixed in commit #335ae54

Rocky Bernstein <rocky>
Project AdministratorIn charge of this item.
Tue 05 May 2015 07:00:29 AM UTC, comment #1:

Forgot to mention: You need to run "iso-info -f [inputfile]" to trigger the crash.

Hanno Boeck <hanno>
Tue 05 May 2015 06:52:29 AM UTC, original submission:

The attached file will crash iso-info. Looks like an invalid pointer access, I'll attach the output of address sanitizer and valgrind.

This was found with the fuzzing tool american fuzzy lop.

Hanno Boeck <hanno>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by rocky (Updated the item)
  • -unavailable- added by hanno (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 8 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Fri 08 May 2015 10:58:17 AM UTCrockyStatusNone=>Fixed
      Assigned toNone=>rocky
      Open/ClosedOpen=>Closed
    Wed 06 May 2015 07:25:11 PM UTCrockyCategoryNone=>run-time error
      Item GroupNone=>libiso9660
    Tue 05 May 2015 06:52:29 AM UTChannoAttached File-=>Added libcdio-_fs_iso_stat_traverse-crash.iso, #33901
      Attached File-=>Added libcdio-_fs_iso_stat_traverse-crash.iso.asan.log, #33902
      Attached File-=>Added libcdio-_fs_iso_stat_traverse-crash.iso.valgrind.log, #33903

    Back to the top


    Powered by Savane 3.1-cleanup1