bugGNU patch - Bugs: bug #61685, Release of Invalid Pointer in...

 
 

bug #61685: Release of Invalid Pointer in another_hunk()

Submitter:  AiDai <aidai>
Submitted:  Thu 16 Dec 2021 11:32:00 AM UTC
   
 
Category:  None Severity:  3 - Normal
Item Group:  None Status:  None
Privacy:  Public Assigned to:  None
Open/Closed:  Open
* Mandatory Fields

Add a New Comment Rich Markup
   

Thu 16 Dec 2021 11:32:00 AM UTC, original submission:  

patch -p0 < poc1
press enter until crash

pwndbg> bt
#0  __GI___libc_free (mem=0x2020202020202020) at malloc.c:3102
#1  0x00005555555639da in another_hunk (difftype=CONTEXT_DIFF, rev=false) at pch.c:1187
#2  0x000055555555c485 in main (argc=1, argv=0x7fffffffe238) at patch.c:408
#3  0x00007ffff7de60b3 in __libc_start_main (main=0x55555555b24d <main>, argc=1, argv=0x7fffffffe238, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7fffffffe228) at ../csu/libc-start.c:308
#4  0x000055555555a03e in _start ()

 AiDai <aidai>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

Attached Files
file #55801:  CVE-2021-45261.patch added by psumbera (2KiB - application/octet-stream - Possible fix.)
file #52514:  poc1 added by aidai (21KiB - application/octet-stream)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by psumbera (Updated the item)
  • -email is unavailable- added by aidai (Submitted the item)

    •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follow 2 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2024-03-08 psumbera Attached File- Added CVE-2021-45261.patch, #55801
    2021-12-16 aidai Attached File- Added poc1, #52514

    Back to the top

    Copyright © 2024 Free Software Foundation, Inc.
    Verbatim copying and distribution of this entire article is permitted in any medium, provided this notice is preserved.
    The Levitating, Meditating, Flute-playing Gnu logo is a GNU GPL'ed image provided by the Nevrax Design Team.
    Page source code

    Powered by Savane 3.13-3dd8.
    Corresponding source code