bugPSPP - Bugs: bug #62980, reachable assertion in read_string

 
 

bug #62980: reachable assertion in read_string

Submitter:  han zheng <kdsj>
Submitted:  Mon 29 Aug 2022 05:39:47 PM UTC
   
 
Category:  None Severity:  5 - Average
Status:  Fixed Assigned to:  None
Open/Closed:  Closed Release:  None
Effort:  0.00
* Mandatory Fields

Add a New Comment Rich Markup
   

Sun 25 Jun 2023 04:33:37 PM UTC, comment #1: 

I pushed a fix for this.

John Darrington <jmd>
Group administrator
Mon 29 Aug 2022 05:39:47 PM UTC, original submission:  

## short summary
Hello, I was testing my fuzzer and find a reachable assertion in read_string, pspp-1.6.2.

## Environment
Ubuntu 21.10
gcc 11.2.0
pspp-1.6.2

## step to reproduce
./configure --disable-shared --without-gui && make -j$(nproc)
./pspp-dump-sav $POC

## output

File header record:
             Product name: @(#) SPSS DATA FILE GNU pspp 0.13.1 - x86_64-unknown-linux-g
              Layout code: 2
               Compressed: 1 (simple compression)
             Weight index: 0
          Number of cases: 40
         Compression bias: 100
            Creation date: 03 Sep 17
            Creation time: 09:57:13
               File label: ""
000000b4: Record 7, subtype 21, size=603979777, count=70
000000c0: long string value labels
        000000c0: , width 1, 16777215 values
                000000d4: "" (0 bytes) => "" (1 bytes)
pspp-dump-sav: utilities/pspp-dump-sav.c:1659: read_string: Assertion `size > 0' failed.
Aborted

## Credit
Han Zheng(NCNIPC of China, Hexhive)

han zheng <kdsj>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

Attached Files
file #53628:  poc1.zip added by kdsj (307B - application/x-zip-compressed)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by jmd (Posted a comment)
  • -email is unavailable- added by kdsj (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follow 3 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2023-06-25 jmd StatusNone Fixed
        Open/ClosedOpen Closed
    2022-08-29 kdsj Attached File- Added poc1.zip, #53628

    Back to the top

    Powered by Savane 3.13-4448.
    Corresponding source code