Greetings,
Using libFuzzer on xerces-c 3.2.2 an 81-byte memory leak was discovered.
This leak appears to be in the initialization of XMLPlatformUtils since
when used incorrectly calling this on a per call basis instead of per
process like the documentation states, the memory of the process continues
to grow.
Has anyone else seen this leak?
More info:
POC:
while(1){
XMLPlatformUtils::Initialize();
XMLPlatformUtils::Terminate();
}
while monitoring memory usage during execution:
$xercesLeakPOC
Benchmark:
PhysMem:6072KB
VirtMem:69188KB
After First iteration:
iterations: 1 PhysMem:9996KB VirtMem:69724KB
iterations: 10296 PhysMem:16028KB VirtMem:75284KB
Benchmark is taken before entering the while loop.
Thanks,
--
C*hristopher Ottesen *| Associate Engineer | Cyber Security Engineering
*COLLINS AEROSPACE*
400 Collins Road NE, Cedar Rapids, IA 52498, USA
*christopher.otte...@collins.com <christopher.otte...@collins.com>* |
*collinsaerospace.com
<http://collinsaerospace.com/>*
CONFIDENTIALITY WARNING: This message may contain proprietary and/or
privileged information of Collins Aerospace and its affiliated companies.
If you are not the intended recipient, please 1) Do not disclose, copy,
distribute or use this message or its contents. 2) Advise the sender by
return email. 3) Delete all copies (including all attachments) from your
computer. Your cooperation is greatly appreciated.
