bugicoutils - Bugs: bug #52307, wrestool: heap out of bounds read...

 
 

bug #52307: wrestool: heap out of bounds read in do_resources_recurs

Submitted by:  Hanno Boeck <hanno>
Submitted on:  Sun 29 Oct 2017 10:36:50 PM UTC  
 
Category: NoneSeverity: 3 - Normal
Item Group: NoneStatus: Fixed
Privacy: PublicAssigned to: None
Open/Closed: Closed

Add a New Comment(Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Tue 31 Oct 2017 04:15:55 PM UTC, comment #1:

Fixed in commit ea4158547c015d0519389631c19912a6b73c8a86/release 0.32.1.

F R <res>
Project Administrator
Sun 29 Oct 2017 10:36:50 PM UTC, original submission:

I'll attach a file that causes an invalid memory read in wrestool. It can be detected by compiling with address sanitizer.

This bug was found with the help of afl.

Stack trace by address sanitizer:
==3701==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x602000000320 at pc 0x0000005146b3 bp 0x7fff0bbcf8d0 sp 0x7fff0bbcf8c8
READ of size 4 at 0x602000000320 thread T0
#0 0x5146b2 in do_resources_recurs /f/icoutils-0.32.0/wrestool/restable.c:113:9
#1 0x513511 in do_resources /f/icoutils-0.32.0/wrestool/restable.c:67:2
#2 0x512aae in main /f/icoutils-0.32.0/wrestool/main.c
#3 0x7fa33b1375dc in __libc_start_main (/lib64/libc.so.6+0x205dc)
#4 0x419ea9 in _start (/r/icoutils/wrestool+0x419ea9)

Hanno Boeck <hanno>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

Attached Files
file #42296:  do_resources_recurs.exe added by hanno (248B - application/x-ms-dos-executable)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by res (Posted a comment)
  • -unavailable- added by hanno (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 3 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Tue 31 Oct 2017 04:15:55 PM UTCresStatusNone=>Fixed
      Open/ClosedOpen=>Closed
    Sun 29 Oct 2017 10:36:50 PM UTChannoAttached File-=>Added do_resources_recurs.exe, #42296

    Back to the top


    Powered by Savane 3.1-cleanup1