bugPSPP - Bugs: bug #62980, reachable assertion in read_string


bug #62980: reachable assertion in read_string

Submitter:  han zheng <kdsj>
Submitted:  Mon 29 Aug 2022 05:39:47 PM UTC
Category:  None Severity:  5 - Average
Status:  None Assigned to:  None
Open/Closed:  Open Release:  None
Effort:  0.00
* Mandatory Fields

Add a New Comment (Rich Markup)

Comment Type & Canned Response:


Mon 29 Aug 2022 05:39:47 PM UTC, original submission:  

## short summary
Hello, I was testing my fuzzer and find a reachable assertion in read_string, pspp-1.6.2.

## Environment
Ubuntu 21.10
gcc 11.2.0

## step to reproduce
./configure --disable-shared --without-gui && make -j$(nproc)
./pspp-dump-sav $POC

## output

File header record:
             Product name: @(#) SPSS DATA FILE GNU pspp 0.13.1 - x86_64-unknown-linux-g
              Layout code: 2
               Compressed: 1 (simple compression)
             Weight index: 0
          Number of cases: 40
         Compression bias: 100
            Creation date: 03 Sep 17
            Creation time: 09:57:13
               File label: ""
000000b4: Record 7, subtype 21, size=603979777, count=70
000000c0: long string value labels
        000000c0: , width 1, 16777215 values
                000000d4: "" (0 bytes) => "" (1 bytes)
pspp-dump-sav: utilities/pspp-dump-sav.c:1659: read_string: Assertion `size > 0' failed.

## Credit
Han Zheng(NCNIPC of China, Hexhive)

han zheng <kdsj>


(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:

Attached Files
file #53628:  poc1.zip added by kdsj (307B - application/x-zip-compressed)


Depends on the following items: None found

Items that depend on this one: None found


Carbon-Copy List
  • -email is unavailable- added by kdsj (Submitted the item)

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.





    Follows 1 latest change.

    Date Changed by Updated Field Previous Value => Replaced by
    2022-08-29 kdsj Attached File- Added poc1.zip, #53628

    Back to the top

    Powered by Savane 3.9