patchGNU Octave - Patches: patch #10365, VM: Prevent out-of-bounds read

 
 

patch #10365: VM: Prevent out-of-bounds read

Submitter:  Petter <petter>
Submitted:  Sun 25 Jun 2023 12:09:31 AM UTC
   
 
Category:  Core : other Priority:  5 - Normal
Status:  Done Privacy:  Public
Assigned to:  None Open/Closed:  Closed
* Mandatory Fields

Add a New Comment Rich Markup
   

Tue 29 Aug 2023 11:47:21 PM UTC, comment #2: 

No complaints. Closing as done.

Arun Giridhar <arungiridhar>
Group Member
Sat 15 Jul 2023 11:55:30 AM UTC, comment #1: 

Thank you for the patch, I pushed it to the default branch of Octave here:
https://hg.savannah.gnu.org/hgweb/octave/rev/aa038131581c

Marking as ready for test.

Markus Mützel <mmuetzel>
Group administrator
Sun 25 Jun 2023 12:09:31 AM UTC, original submission:  

"
Prefetching of 'arg0' for single byte opcodes leads to reading past the end
of the array that stores the opcodes.

  • libinterp/parse-tree/pt-bytecode-walk.cc: Append dummy opcode

"

Running asan complained about a out of bounds read from the array containing the bytecode, due to the VM reading the next byte after the first byte in an opcode, into the variable arg0. This leads to an out-of-bounds read for the last opcode if it is one byte long.


Petter <petter>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

Attached Files
file #54871:  octave_32273.patch added by petter (1KiB - text/plain)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by arungiridhar (Posted a comment)
  • -email is unavailable- added by mmuetzel (Posted a comment)
  • -email is unavailable- added by petter (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follow 5 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2023-08-29 arungiridhar StatusReady For Test Done
        Open/ClosedOpen Closed
    2023-07-15 mmuetzel CategoryNone Core : other
        StatusNone Ready For Test
    2023-06-25 petter Attached File- Added octave_32273.patch, #54871

    Back to the top

    Powered by Savane 3.13-4b48.
    Corresponding source code