Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Stack based buffer overflow #14

Closed
dzonerzy opened this issue Feb 22, 2017 · 3 comments
Closed

Stack based buffer overflow #14

dzonerzy opened this issue Feb 22, 2017 · 3 comments
Assignees
@dimonomid

Comments

@dzonerzy
Copy link

dzonerzy commented Feb 22, 2017 •
edited
Loading

Hi,

While I was auditing frozen library using PyJFuzz, I came across a stack based overflow using the following testcase with address sanitizer.

e1f555ceb332dc1717778aba679cfdda20939edf.txt

I didn't investigate further, anyway there're other exploitable issue, I'll report later.

Thanks for your support!
Regards,
Daniele
@dzonerzy dzonerzy changed the title Stack base buffer overflow Stack based buffer overflow Feb 22, 2017
@cpq
Copy link
Member

cpq commented Feb 22, 2017

Dima please fix this, add unit test, and tag a new release.
@dzonerzy thanks for reporting.

@dimonomid
Copy link
Contributor

@dzonerzy , thanks!

cesantabot pushed a commit that referenced this issue Feb 23, 2017
@dimonomid @cesantabot
Fix frozen buffer overflow
76c3c44 
Resolves #14

A better solution would be to allocate buffer from the heap if
necessary, but it's TODO.

PUBLISHED_FROM=3afba5b216dc101b258f677993c464be42c5e717
cesantabot pushed a commit to cesanta/mjs that referenced this issue Feb 23, 2017
@dimonomid @cesantabot
Fix frozen buffer overflow
e653980 
Resolves cesanta/frozen#14

A better solution would be to allocate buffer from the heap if
necessary, but it's TODO.

PUBLISHED_FROM=3afba5b216dc101b258f677993c464be42c5e717
cesantabot pushed a commit to cesanta/mongoose-os that referenced this issue Feb 23, 2017
@dimonomid @cesantabot
Fix frozen buffer overflow
9a2ad49 
Resolves cesanta/frozen#14

A better solution would be to allocate buffer from the heap if
necessary, but it's TODO.

PUBLISHED_FROM=3afba5b216dc101b258f677993c464be42c5e717
@dzonerzy
Copy link
Author

Thank you for the fast answer and the fix, awesome job!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@dimonomid dimonomid

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@cpq @dimonomid @dzonerzy