https://bugs.exim.org/show_bug.cgi?id=2050
Bug ID: 2050 Summary: two memory allocation failure in pcretest.c Product: PCRE Version: 8.40 Hardware: x86-64 OS: Linux Status: NEW Severity: bug Priority: medium Component: Code Assignee: p...@hermes.cam.ac.uk Reporter: a...@gentoo.org CC: pcre-dev@exim.org Created attachment 990 --> https://bugs.exim.org/attachment.cgi?id=990&action=edit stacktrace 1 Hello, I found two memory allocation failure through fuzzing. These types of warnings are generated from ASan when the program needs more than 64GB of memory. In a normal circumstance ( so when the build was not compiled with asan/debug ) you may see nothing strange, so it can be a false positive. It was tested on version 8.40, compiled with clang-3.9.1 Output, included stacktrace in attachment. Command to reproduce: # pcretest -16 -d $FILE Reproducer for stacktrace 1: https://github.com/asarubbo/poc/blob/master/00201-pcre-memallocfailure-pcretest Reproducer for stacktrace 2: https://github.com/asarubbo/poc/blob/master/00202-pcre-memallocfailure2-pcretest ( I know that is preferable attach reproducer here, but these link won't expire in the future ) -- You are receiving this mail because: You are on the CC list for the bug. -- ## List details at https://lists.exim.org/mailman/listinfo/pcre-dev