bugCompact Disc Input and Control Library - Bugs: bug #45014, Heap overflow / invalid read on...

 
 

bug #45014: Heap overflow / invalid read on malformed iso in function _iso9660_dir_to_statbuf()

Submitted by:  Hanno Boeck <hanno>
Submitted on:  Tue 05 May 2015 07:03:02 AM UTC  
 
Category: run-time errorSeverity: 5 - Average
Item Group: libiso9660Status: Fixed
Privacy: PublicAssigned to: Rocky Bernstein <rocky>
Open/Closed: Closed

Add a New Comment(Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Fri 08 May 2015 10:34:26 PM UTC, comment #1:

With commit 8be41a3, I believe this is fixed.

Rocky Bernstein <rocky>
Project AdministratorIn charge of this item.
Tue 05 May 2015 07:03:02 AM UTC, original submission:

Attached file will trigger a heap overflow with iso-info -f.

To see it one needs to use either Address Sanitizer or Valgrind. I've attached the output of both. This was found with american fuzzy lop.

Hanno Boeck <hanno>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by rocky (Updated the item)
  • -unavailable- added by hanno (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 8 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Sat 25 Mar 2017 09:44:47 AM UTCrockyOpen/ClosedOpen=>Closed
    Fri 08 May 2015 10:34:26 PM UTCrockyStatusNone=>Fixed
      Assigned toNone=>rocky
    Wed 06 May 2015 07:24:26 PM UTCrockyCategoryNone=>run-time error
      Item GroupNone=>libiso9660
    Tue 05 May 2015 07:03:02 AM UTChannoAttached File-=>Added libcdio-heapoverflow-_iso9660_dir_to_statbuf.iso, #33904
      Attached File-=>Added libcdio-heapoverflow-_iso9660_dir_to_statbuf.iso.valgrind.txt, #33905
      Attached File-=>Added libcdio-heapoverflow-_iso9660_dir_to_statbuf.iso.asan.txt, #33906

    Back to the top


    Powered by Savane 3.1-cleanup1