Actions
Bug #3775
closedMemory leak in libhtp in error case
Affected Versions:
Effort:
Difficulty:
Label:
Description
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22709
Stack trace is
Direct leak of 31 byte(s) in 1 object(s) allocated from: #0 0x51dbad in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:145:3 #1 0x5565e0 in bstr_alloc libhtp/htp/bstr.c:44:15 #2 0x5565e0 in bstr_dup_mem libhtp/htp/bstr.c:259:18 #3 0x57162c in htp_parse_request_line_generic_ex libhtp/htp/htp_request_generic.c:326:26 #4 0x56e11d in htp_connp_REQ_LINE_complete libhtp/htp/htp_request.c:797:9 #5 0x56f4a0 in htp_connp_req_data libhtp/htp/htp_request.c:1048:27 #6 0x5502d2 in LLVMFuzzerTestOneInput libhtp/test/fuzz/fuzz_htp.c:190:18
Reproducer is
<<< >>> CONNECT ˇ ˇ <<< <<< <<< HTTP 101 >>> GET : CONNECT
Actions