We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Stack Overflow in SingleDocParser::HandleFlowMap()
position:code
poc
To reproduce: ./parse < crash9.txt
./parse < crash9.txt
gdb: Program received signal SIGSEGV, Segmentation fault. 0x08081d5d in YAML::SingleDocParser::HandleFlowMap(YAML::EventHandler&) ()
Program received signal SIGSEGV, Segmentation fault.
0x08081d5d in YAML::SingleDocParser::HandleFlowMap(YAML::EventHandler&) ()
ASAN: ASAN:DEADLYSIGNAL ================================================================= ==6596==ERROR: AddressSanitizer: stack-overflow on address 0xbf09dee0 (pc 0x0814e423 bp 0xbf09e308 sp 0xbf09ded0 T0) #0 0x814e422 (/home/user/yaml-cpp/build/util/parse+0x814e422) #1 0x816fd48 (/home/user/yaml-cpp/build/util/parse+0x816fd48) #2 0x8190a72 (/home/user/yaml-cpp/build/util/parse+0x8190a72) #3 0x81d5061 (/home/user/yaml-cpp/build/util/parse+0x81d5061) #4 0x81deb85 (/home/user/yaml-cpp/build/util/parse+0x81deb85) #5 0x81d511a (/home/user/yaml-cpp/build/util/parse+0x81d511a) #6 0x81deb85 (/home/user/yaml-cpp/build/util/parse+0x81deb85) #7 0x81d511a (/home/user/yaml-cpp/build/util/parse+0x81d511a) #8 0x81deb85 (/home/user/yaml-cpp/build/util/parse+0x81deb85) #9 0x81d511a (/home/user/yaml-cpp/build/util/parse+0x81d511a) #10 0x81deb85 (/home/user/yaml-cpp/build/util/parse+0x81deb85) ...... #247 0x81d511a (/home/user/yaml-cpp/build/util/parse+0x81d511a) #248 0x81deb85 (/home/user/yaml-cpp/build/util/parse+0x81deb85) #249 0x81d511a (/home/user/yaml-cpp/build/util/parse+0x81d511a) #250 0x81deb85 (/home/user/yaml-cpp/build/util/parse+0x81deb85) SUMMARY: AddressSanitizer: stack-overflow (/home/user/yaml-cpp/build/util/parse+0x814e422) ==6596==ABORTING
ASAN:DEADLYSIGNAL
================================================================= ==6596==ERROR: AddressSanitizer: stack-overflow on address 0xbf09dee0 (pc 0x0814e423 bp 0xbf09e308 sp 0xbf09ded0 T0)
#0 0x814e422 (/home/user/yaml-cpp/build/util/parse+0x814e422)
#1 0x816fd48 (/home/user/yaml-cpp/build/util/parse+0x816fd48)
#2 0x8190a72 (/home/user/yaml-cpp/build/util/parse+0x8190a72)
#3 0x81d5061 (/home/user/yaml-cpp/build/util/parse+0x81d5061)
#4 0x81deb85 (/home/user/yaml-cpp/build/util/parse+0x81deb85)
#5 0x81d511a (/home/user/yaml-cpp/build/util/parse+0x81d511a)
#6 0x81deb85 (/home/user/yaml-cpp/build/util/parse+0x81deb85)
#7 0x81d511a (/home/user/yaml-cpp/build/util/parse+0x81d511a)
#8 0x81deb85 (/home/user/yaml-cpp/build/util/parse+0x81deb85)
#9 0x81d511a (/home/user/yaml-cpp/build/util/parse+0x81d511a)
#10 0x81deb85 (/home/user/yaml-cpp/build/util/parse+0x81deb85)
......
#247 0x81d511a (/home/user/yaml-cpp/build/util/parse+0x81d511a)
#248 0x81deb85 (/home/user/yaml-cpp/build/util/parse+0x81deb85)
#249 0x81d511a (/home/user/yaml-cpp/build/util/parse+0x81d511a)
#250 0x81deb85 (/home/user/yaml-cpp/build/util/parse+0x81deb85)
SUMMARY: AddressSanitizer: stack-overflow (/home/user/yaml-cpp/build/util/parse+0x814e422) ==6596==ABORTING
The text was updated successfully, but these errors were encountered:
CVE-2018-20574
Sorry, something went wrong.
@jbeder Was this ever addressed? Thanks in advance !
I don't think so.
Successfully merging a pull request may close this issue.
Stack Overflow in SingleDocParser::HandleFlowMap()
position:code
poc
To reproduce:
./parse < crash9.txt
gdb:
Program received signal SIGSEGV, Segmentation fault.
0x08081d5d in YAML::SingleDocParser::HandleFlowMap(YAML::EventHandler&) ()
ASAN:
ASAN:DEADLYSIGNAL
================================================================= ==6596==ERROR: AddressSanitizer: stack-overflow on address 0xbf09dee0 (pc 0x0814e423 bp 0xbf09e308 sp 0xbf09ded0 T0)
#0 0x814e422 (/home/user/yaml-cpp/build/util/parse+0x814e422)
#1 0x816fd48 (/home/user/yaml-cpp/build/util/parse+0x816fd48)
#2 0x8190a72 (/home/user/yaml-cpp/build/util/parse+0x8190a72)
#3 0x81d5061 (/home/user/yaml-cpp/build/util/parse+0x81d5061)
#4 0x81deb85 (/home/user/yaml-cpp/build/util/parse+0x81deb85)
#5 0x81d511a (/home/user/yaml-cpp/build/util/parse+0x81d511a)
#6 0x81deb85 (/home/user/yaml-cpp/build/util/parse+0x81deb85)
#7 0x81d511a (/home/user/yaml-cpp/build/util/parse+0x81d511a)
#8 0x81deb85 (/home/user/yaml-cpp/build/util/parse+0x81deb85)
#9 0x81d511a (/home/user/yaml-cpp/build/util/parse+0x81d511a)
#10 0x81deb85 (/home/user/yaml-cpp/build/util/parse+0x81deb85)
......
#247 0x81d511a (/home/user/yaml-cpp/build/util/parse+0x81d511a)
#248 0x81deb85 (/home/user/yaml-cpp/build/util/parse+0x81deb85)
#249 0x81d511a (/home/user/yaml-cpp/build/util/parse+0x81d511a)
#250 0x81deb85 (/home/user/yaml-cpp/build/util/parse+0x81deb85)
SUMMARY: AddressSanitizer: stack-overflow (/home/user/yaml-cpp/build/util/parse+0x814e422) ==6596==ABORTING
The text was updated successfully, but these errors were encountered: