Bug 697021 - mujstest: global-buffer-overflow in my_getline (jstest_main.c)
Summary: mujstest: global-buffer-overflow in my_getline (jstest_main.c)
Status: RESOLVED FIXED
Alias: None
Product: MuPDF
Classification: Unclassified
Component: fuzzing (show other bugs)
Version: 1.9
Hardware: PC Linux
: P4 normal
Assignee: MuPDF bugs
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2016-08-05 07:51 UTC by Agostino Sarubbo
Modified: 2016-09-22 10:09 UTC (History)
1 user (show)

See Also:
Customer:
Word Size: ---

Attachments
reproducer (5.46 KB, application/octet-stream)
2016-08-05 07:51 UTC, Agostino Sarubbo 		Details
stacktrace (2.78 KB, text/plain)
2016-08-05 07:51 UTC, Agostino Sarubbo 		Details
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Agostino Sarubbo 2016-08-05 07:51:09 UTC 
Created attachment 12821 [details]
reproducer

Hello,

there is a global buffer overflow in my_getline triggered from a crafted file.

I'm attaching:
1) The reproducer;
2) The stacktrace provided by Address Sanitizer;
Comment 1 Agostino Sarubbo 2016-08-05 07:51:28 UTC 
Created attachment 12822 [details]
stacktrace
Comment 2 Agostino Sarubbo 2016-09-21 07:03:18 UTC 
The command to reproduce the issue is:
# mujstest $REPRODUCER
Comment 3 Sebastian Rasmussen 2016-09-22 10:09:02 UTC 
This issue has been fixed by commit 446097f97b71ce20fa8d1e45e070f2e62676003e.