Project

General

Profile

Actions
Copy link

Bug #4403

closed

Use after free or read overflow or use of unitized memory in TransformStripWhitespace called by HttpServerBodyXformsGetDataCallback

Added by Philippe Antoine almost 4 years ago. Updated about 3 years ago.

Status:
Closed
Priority:
High
Assignee:
Victor Julien
Target version:
7.0.0-beta1
Affected Versions:
git master
Effort:
Difficulty:
Label:

Description

Found by oss-fuzz
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31987

The issue was created a day after this hit master https://github.com/OISF/suricata/pull/5932

The bug may be changing int to int16 in
https://github.com/OISF/suricata/pull/5932/commits/975062cf401f79c00abf728d923c65aabd143af2#diff-99eda33658bd0778da7bf89acbb4e7bbdb9ce82b0ab93486e1643691925f4091L600

Files

lol.py (405 Bytes) lol.py Philippe Antoine, 03/24/2021 08:46 PM
Actions
Copy link

Also available in: Atom PDF