-
Recent Posts
Recent Comments
- strongcourage on Why I stopped fuzzing research
- Bob Friesenhahn on Why I stopped fuzzing research
- #gentoo dev: Why I stopped fuzzing research https://blogs.gentoo.or… | Dr. Roy Schestowitz (罗伊) on Why I stopped fuzzing research
- Ulya on Why I stopped fuzzing research
- ago on Install Gentoo in less than one minute
Archives
- July 2020
- April 2020
- March 2019
- October 2017
- September 2017
- August 2017
- July 2017
- June 2017
- May 2017
- April 2017
- March 2017
- February 2017
- January 2017
- December 2016
- November 2016
- October 2016
- September 2016
- August 2016
- July 2016
- February 2016
- July 2015
- August 2013
- June 2013
- May 2013
- January 2013
- December 2012
- November 2012
- October 2012
- August 2012
- July 2012
- June 2012
Categories
Meta
Monthly Archives: September 2017
mp3gain: memcpy-param-overlap in set_pointer (mpglibDBL/common.c)
Description: mp3gain is a program to analyze and adjust MP3 files to same volume. The fuzz was done via the aacgain command-line tool which uses mp3gain which bundles an old-modified version of mpg123 called mpglibDBL. The upstream project seems to … Continue reading
Posted in advisories, security
Leave a comment
mp3gain: stack-based buffer overflow in copy_mp (mpglibDBL/interface.c)
Description: mp3gain is a program to analyze and adjust MP3 files to same volume. The fuzz was done via the aacgain command-line tool which uses mp3gain which bundles an old-modified version of mpg123 called mpglibDBL. The upstream project seems to … Continue reading
Posted in advisories, security
Leave a comment
mp3gain: NULL pointer dereference in sync_buffer (mpglibDBL/interface.c)
Description: mp3gain is a program to analyze and adjust MP3 files to same volume. The fuzz was done via the aacgain command-line tool which uses mp3gain which bundles an old-modified version of mpg123 called mpglibDBL. The upstream project seems to … Continue reading
Posted in advisories, security
1 Comment
mp3gain: stack-based buffer overflow in filterYule (gain_analysis.c)
Description: mp3gain is a program to analyze and adjust MP3 files to same volume. The fuzz was done via the aacgain command-line tool which uses mp3gain. The upstream project seems to be dead, so the issue wasn’t communicated to them. … Continue reading
Posted in advisories, security
Leave a comment
aacplusenc: NULL pointer dereference in DeleteBitBuffer (bitbuffer.c)
Description: aacplusenc is an High-Efficiency AAC (AAC+) Encoder. The complete ASan output of the issue: # aacplusenc $FILE out.aac 32 ************************************************************* * Enhanced aacPlus Encoder * Build Aug 30 2017, 14:40:49 * Matteo Croce ************************************************************* input file 101.crashes.wav: sr = … Continue reading
Posted in advisories, security
1 Comment
libarchive: heap-based buffer overflow in xml_data (archive_read_support_format_xar.c)
Description: libarchive is a multi-format archive and compression library. The complete ASan output of the issue: # bsdtar -t -f $FILE ==13144==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x631000038800 at pc 0x7fb1c808f650 bp 0x7ffdd1b40990 sp 0x7ffdd1b40988 READ of size 1 at 0x631000038800 … Continue reading
Posted in advisories, security
1 Comment
graphicsmagick: memory allocation failure in MagickMalloc (memory.c)
Description: graphicsmagick is a collection of tools and libraries for many image formats. The relevant ASan output of the issue: # gm convert -negate -clip $file out ==25373==End of process memory map. ==25373==AddressSanitizer CHECK failed: /var/tmp/portage/sys-libs/compiler-rt-sanitizers-4.0.1/work/compiler-rt-4.0.1.src/lib/sanitizer_common/sanitizer_common.cc:120 “((0 && “unable to … Continue reading
Posted in advisories, security
Leave a comment
openjpeg: heap-based buffer overflow in opj_write_bytes_LE (cio.c) (INCOMPLETE FIX FOR CVE-2017-14152)
Description: openjpeg is an open-source JPEG 2000 library. The fix for CVE-2017-14152 seems that wasn’t enough. The complete ASan output of the issue: # opj_compress -r 20,10,1 -jpip -EPH -SOP -cinema2K 24 -n 1 -i $FILE -o null.j2k TIFFReadDirectoryCheckOrder: Warning, … Continue reading
Posted in advisories, security
1 Comment
libzip: use-after-free in _zip_buffer_free (zip_buffer.c)
Description: libzip is a library for manipulating zip archives. The relevant ASan output of the issue: # ziptool $FILE cat index ==1771==ERROR: AddressSanitizer: heap-use-after-free on address 0x6030000000d1 at pc 0x7f267d085fc1 bp 0x7ffed21f65f0 sp 0x7ffed21f65e8 READ of size 1 at 0x6030000000d1 … Continue reading
Posted in advisories, security
Leave a comment
libzip: memory allocation failure in _zip_cdir_grow (zip_dirent.c)
Description: libzip is a library for manipulating zip archives. The relevant ASan output of the issue: # ziptool $FILE cat index ==16798==ERROR: AddressSanitizer failed to allocate 0xc0a96a2000 (827476025344) bytes of LargeMmapAllocator (error code: 12) ==16798==Process memory map follows: ==16798==End of … Continue reading
Posted in advisories, security
Leave a comment