Bug #2177: asn1/der: stack overflow - Suricata - Open Information Security Foundation

Actions

Copy link

Bug #2177

closed

asn1/der: stack overflow

Added by Victor Julien over 7 years ago. Updated over 7 years ago.

Status:

Closed

Priority:

Normal

Assignee:

Victor Julien

Target version:

4.0rc2

Affected Versions:

Effort:

Difficulty:

Label:

Actions

Copy link

Updated by Victor Julien over 7 years ago

Found using AFL:

=================================================================
==25045==ERROR: AddressSanitizer: stack-overflow on address 0x7ffd04cb9c88 (pc 0x0000004bbf22 bp 0x7ffd04cba4d0 sp 0x7ffd04cb9c70 T0)
    #0 0x4bbf21 in malloc (/home/victor/suricata/src/suricata+0x4bbf21)
    #1 0xb15189 in Asn1GenericNew /home/victor/suricata/src/util-decode-der.c:99:11
    #2 0xb0f586 in DecodeAsn1DerSequence /home/victor/suricata/src/util-decode-der.c:726:12
    ...
    #500 0xb11304 in DecodeAsn1DerSequence /home/victor/suricata/src/util-decode-der.c:762:30
    #501 0xb11304 in DecodeAsn1DerGeneric /home/victor/suricata/src/util-decode-der.c:214
SUMMARY: AddressSanitizer: stack-overflow (/home/victor/suricata/src/suricata+0x4bbf21) in malloc
==25045==ABORTING

Actions

Copy link