The GNU Bourne-Again SHell - Patches: patch #10461, UAF in several functions in parse.y

You are not allowed to post comments on this tracker with your current authentication level.

patch #10461: UAF in several functions in parse.y

Submitter:	Artem Chernyshev <dtenebrae>
Submitted:	Tue 25 Jun 2024 11:29:10 AM UTC
Category:	None	Priority:	5 - Normal
Status:	Done	Privacy:	Public
Assigned to:	None	Open/Closed:	Open

Wed 26 Jun 2024 03:20:39 PM UTC, comment #1:  Thanks for the report. This was fixed back in 1/2024 as the result of https://lists.gnu.org/archive/html/bug-bash/2024-01/msg00016.html	Chet Ramey <chet>
Tue 25 Jun 2024 11:29:10 AM UTC, original submission:   We discovered some UAF and double-free bugs in parse.y with AFL fuzzing. Repro is attached along with suggested patch. Configured as follows: configure --with-bash-malloc=no \           --with-afs Repro tested on bash 5.2.26	Artem Chernyshev <dtenebrae>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attached Files

file #56203:  id_000000,sig_11,src_009131,time_61652956,execs_1548179,op_havoc added by dtenebrae (246B - application/octet-stream)

file #56204:  0001-parse-UAF-in-parse_compound_assignment.patch added by dtenebrae (2KiB - text/x-patch)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List

-email is unavailable- added by chet (Posted a comment)

-email is unavailable- added by dtenebrae (Submitted the item)

 

There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

 

Copyright © 2024 Free Software Foundation, Inc.
Verbatim copying and distribution of this entire article is permitted in any medium, provided this notice is preserved.
The Levitating, Meditating, Flute-playing Gnu logo is a GNU GPL'ed image provided by the Nevrax Design Team.
Page source code