bugmake - Bugs: bug #55088, out-of-bounds read at arscan.c::720

 
 

bug #55088: out-of-bounds read at arscan.c::720

Submitter:  Ning <ning>
Submitted:  Sat 24 Nov 2018 06:35:22 PM UTC
   
 
Severity:  3 - Normal Item Group:  Bug
Status:  Duplicate Privacy:  Public
Assigned to:  None Open/Closed:  Closed
Component Version:  4.2.1 Operating System:  POSIX-Based
Fixed Release:  None Triage Status:  None
* Mandatory Fields

Add a New Comment Rich Markup
   

Mon 13 May 2019 10:04:30 PM UTC, comment #1: 

A number of updates for issues found by static code analysis, etc. have been fixed since 4.2.1 was released.  Without any sort of reproducer case for this there's no way I can know whether it's been addressed or not so I'm closing this.  Feel free to add a comment if you still see it with Git HEAD and I can re-open.

Paul D. Smith <psmith>
Group administrator
Sat 24 Nov 2018 06:35:22 PM UTC, original submission:  

ar Urv libxx.a a1.o
ar: creating libxx.a
a - a1.o

DTS_MSG: Stensal DTS detected a fatal program error!
DTS_MSG: Continuing the execution will cause unexpected behaviors, abort!
DTS_MSG: Reading 1 bytes at 0xfff53e98 will read undefined values.
DTS_MSG: Diagnostic information:

- The object to-be-read (start:0xfff53e5c, size:60 bytes) is allocated at
-     file:/home/sbuilder/workspace/aports/main/make/src/make-4.2.1/arscan.c::533, 23
-  0xfff53e5c               0xfff53e97
-  +------------------------+
-  | the object  to-be-read |......
-  +------------------------+
-                            ^~~~~~~~~~
-        the read starts at 0xfff53e98 that is right after the object end.
- Stack trace (most recent call first):
-[1]  file:/musl-1.1.10/src/string/memchr.c::25, 9
-[2]  file:/musl-1.1.10/src/stdio/__string_read.c::8, 14
-[3]  file:/musl-1.1.10/src/stdio/vsscanf.c::6, 9
-[4]  file:/musl-1.1.10/src/stdio/__uflow.c::9, 22
-[5]  file:/musl-1.1.10/src/internal/shgetc.c::16, 45
-[6]  file:/musl-1.1.10/src/stdio/vfscanf.c::177, 11
-[7]  file:/musl-1.1.10/src/stdio/vsscanf.c::15, 9
-[8]  file:/musl-1.1.10/src/stdio/sscanf.c::10, 8
-[9]  file:/home/sbuilder/workspace/aports/main/make/src/make-4.2.1/arscan.c::720, 9
-[10]  file:/home/sbuilder/workspace/aports/main/make/src/make-4.2.1/ar.c::110, 9
-[11]  file:/home/sbuilder/workspace/aports/main/make/src/make-4.2.1/remake.c::1333, 21
-[12]  file:/home/sbuilder/workspace/aports/main/make/src/make-4.2.1/remake.c::1043, 15
-[13]  file:/home/sbuilder/workspace/aports/main/make/src/make-4.2.1/remake.c::589, 17
-[14]  file:/home/sbuilder/workspace/aports/main/make/src/make-4.2.1/remake.c::336, 13
-[15]  file:/home/sbuilder/workspace/aports/main/make/src/make-4.2.1/remake.c::151, 22
-[16]  file:/home/sbuilder/workspace/aports/main/make/src/make-4.2.1/main.c::2558, 13

Ning <ning>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by psmith (Posted a comment)
  • -email is unavailable- added by ning (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follow 2 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2019-05-13 psmith StatusNone Duplicate
        Open/ClosedOpen Closed

    Back to the top

    Powered by Savane 3.13-4448.
    Corresponding source code