bugGNUstep Application Project - Bugs: bug #52736, [Cynthiune] Buffer overflow in the...

 
 

bug #52736: [Cynthiune] Buffer overflow in the ASFTags bundle

Submitted by:  Yavor Doganov <yavor>
Submitted on:  Sun 24 Dec 2017 02:56:23 PM UTC  
 
Category:  Application Severity:  3 - Normal
Item Group:  Bug Status:  None
Privacy:  Public Assigned to:  None
Open/Closed:  Open

Add a New Comment(Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Sun 24 Dec 2017 02:56:23 PM UTC, original submission:

On GNU/Linux x86_64, adding a .wma song leads to abort:

There's a buffer overflow in convertGUID -- the size is 44 in this case and doesn't fit into the allocated string. Increasing the size is not an option as the comparison in objectIsOfType will fail anyway. Proposed patch attached.

Yavor Doganov <yavor>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

Attached Files
file #42713:  buffer-oveflow.patch added by yavor (1KiB - text/x-patch)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by yavor (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

     

     

    Follows 1 latest change.

    Date Changed by Updated Field Previous Value => Replaced by
    2017-12-24 yavor Attached File- => Added buffer-oveflow.patch, #42713

    Back to the top


    Powered by Savane 3.3