GNU gettext - Bugs: bug #45391, Out of bounds read in xgettext on...
You are not allowed to post comments on this tracker with your current authentication level.
bug #45391: Out of bounds read in xgettext on malformed input
Submitter: | Hanno Boeck <hanno> | ||
Submitted: | Wed 24 Jun 2015 01:17:28 PM UTC | ||
Category: | Programmer tools | Severity: | 3 - Normal |
Item Group: | None | Status: | Fix Released |
Privacy: | Public | Assigned to: | ueno |
Open/Closed: | Closed |
Jump to the original submission
Fri 26 Jun 2015 02:54:02 AM UTC, comment #7: |
Daiki Ueno <ueno> |
Thu 25 Jun 2015 03:11:16 PM UTC, comment #6: yes, fixed now, you can close the bug |
Hanno Boeck <hanno> |
Thu 25 Jun 2015 12:05:47 PM UTC, comment #5: Ugh, the fix was immature. I think it should be fixed now with:
|
Daiki Ueno <ueno> |
Thu 25 Jun 2015 09:06:34 AM UTC, comment #4: I still get the same error on the second input. (file content 'gettext("\x'). |
Hanno Boeck <hanno> |
Thu 25 Jun 2015 02:50:19 AM UTC, comment #3: Right, thanks for your carefulness.
|
Daiki Ueno <ueno> |
Wed 24 Jun 2015 02:51:42 PM UTC, comment #2: It fixes the first input, but a small variant of it still causes an oob, see attachment. Instead of a zero byte and a newline it has an x after the \:
|
Hanno Boeck <hanno> |
Wed 24 Jun 2015 02:30:38 PM UTC, comment #1: Thanks for the report. I've committed a fix:
|
Daiki Ueno <ueno> |
Wed 24 Jun 2015 01:17:28 PM UTC, original submission:
The attached file will cause an out of bounds heap read access in xgettext. Found with american fuzzy lop. This can be detected with either address sanitizer or valgrind.
|
Hanno Boeck <hanno> |
Depends on the following items: None found
Items that depend on this one: None found
There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.
Follow 7 latest changes.
Date | Changed by | Updated Field | Previous Value | => | Replaced by |
---|---|---|---|---|---|
2023-01-04 | haible | Status | Fixed | Fix Released | |
2016-11-27 | haible | Category | None | Programmer tools | |
Assigned to | None | ueno | |||
2015-06-26 | ueno | Status | None | Fixed | |
Open/Closed | Open | Closed | |||
2015-06-24 | hanno | Attached File | - | Added xgettext-oob-heap-literalstring_parse-2.c, #34306 | |
2015-06-24 | hanno | Attached File | - | Added xgettext-oob-heap-literalstring_parse.c, #34305 |
Powered by Savane 3.13-02a9.
Corresponding source code
Thanks for confirming.