Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

There is a stack-overflow in sassc of the libsass library #2445

Closed
abompard opened this issue Jul 18, 2017 · 4 comments
Closed

There is a stack-overflow in sassc of the libsass library #2445

abompard opened this issue Jul 18, 2017 · 4 comments
Labels
Bug - Maybe

Comments

@abompard
Copy link

This was reported here: https://bugzilla.redhat.com/show_bug.cgi?id=1471780
In this Bugzilla ticket you will find all the information and the code to reproduce the error.
@saper
Copy link
Member

saper commented Jul 19, 2017

Which version of libsass has been used?

@abompard
Copy link
Author

Version 3.4.1

(sorry for not replying sooner)

@mgreter
Copy link
Contributor

mgreter commented Jul 25, 2017

Can you try it again with latest master?! I believe this has been fixed by 7664114. Thanks!

I get with master:

Error: Code too deeply neested
        on line 1 of POC4

@mgreter mgreter closed this as completed Nov 10, 2017
@xi
Copy link

xi commented Jun 5, 2019

Assigned CVE-2017-11554

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
Bug - Maybe
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
4 participants
@abompard @xi @saper @mgreter