Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Segmentation Fault in ngiflib.c #16

Closed
c0d3xpl0it opened this issue Oct 30, 2019 · 0 comments
Closed

Segmentation Fault in ngiflib.c #16

c0d3xpl0it opened this issue Oct 30, 2019 · 0 comments

Comments

@c0d3xpl0it
Copy link

We found Segmentation Fault issue in gif2tga binary and gif2tga is complied with clang enabling ASAN.

Machine Setup
Machine : Ubuntu 16.04.3 LTS
gcc version 5.4.0 20160609 (Ubuntu 5.4.0-6ubuntu1~16.04.11)
Commit : 992d272
Command : ./gif2tga $POC

POC :- GifIndexToTrueColor-SEGV.zip

ASAN Output

fuzzer@thickfuzzer:~/fuzzer/ngiflib$ ./gif2tga in/GifIndexToTrueColor-SEGV
ASAN:DEADLYSIGNAL
=================================================================
==11610==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000005 (pc 0x0000004f2268 bp 0x7ffe389c63f0 sp 0x7ffe389c1d20 T0)
    #0 0x4f2267 in GifIndexToTrueColor /home/fuzzer/fuzzer/ngiflib/ngiflib.c:844:20
    #1 0x4f2267 in WritePixel /home/fuzzer/fuzzer/ngiflib/ngiflib.c:134
    #2 0x4f2267 in DecodeGifImg /home/fuzzer/fuzzer/ngiflib/ngiflib.c:560
    #3 0x4f2267 in LoadGif /home/fuzzer/fuzzer/ngiflib/ngiflib.c:825
    #4 0x4ea8a6 in main /home/fuzzer/fuzzer/ngiflib/gif2tga.c:95:10
    #5 0x7f2b1146c82f in __libc_start_main /build/glibc-LK5gWL/glibc-2.23/csu/../csu/libc-start.c:291
    #6 0x418a98 in _start (/home/fuzzer/fuzzer/ngiflib/gif2tga+0x418a98)

AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: SEGV /home/fuzzer/fuzzer/ngiflib/ngiflib.c:844:20 in GifIndexToTrueColor
==11610==ABORTING
fuzzer@thickfuzzer:~/fuzzer/ngiflib$
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant