https://bugs.exim.org/show_bug.cgi?id=2050

            Bug ID: 2050
           Summary: two memory allocation failure in pcretest.c
           Product: PCRE
           Version: 8.40
          Hardware: x86-64
                OS: Linux
            Status: NEW
          Severity: bug
          Priority: medium
         Component: Code
          Assignee: p...@hermes.cam.ac.uk
          Reporter: a...@gentoo.org
                CC: pcre-dev@exim.org

Created attachment 990
  --> https://bugs.exim.org/attachment.cgi?id=990&action=edit
stacktrace 1

Hello,

I found two memory allocation failure through fuzzing.

These types of warnings are generated from ASan when the program needs more
than 64GB of memory.
In a normal circumstance ( so when the build was not compiled with asan/debug )
you may see nothing strange, so it can be a false positive. 

It was tested on version 8.40, compiled with clang-3.9.1

Output, included stacktrace in attachment.

Command to reproduce:
# pcretest -16 -d $FILE

Reproducer for stacktrace 1:
https://github.com/asarubbo/poc/blob/master/00201-pcre-memallocfailure-pcretest

Reproducer for stacktrace 2:
https://github.com/asarubbo/poc/blob/master/00202-pcre-memallocfailure2-pcretest

( I know that is preferable attach reproducer here, but these link won't expire
in the future )

-- 
You are receiving this mail because:
You are on the CC list for the bug.
-- 
## List details at https://lists.exim.org/mailman/listinfo/pcre-dev 

Reply via email to