Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Heap corruption in lys_parse_path due to type statement in notification statement #769

Closed
jvijtiuk opened this issue Apr 26, 2019 · 1 comment

Comments

@jvijtiuk
Copy link
Collaborator

Hi,

this file causes heap corruption and crashes lys_parse_path

module mod6 {

    prefix abc;
    namespace "http://www.example.c;
    yang-version 1.1;

    container cont1 {
        //x" {
              
        }

        augment "/aug-cont" {
            list list2 {
                key "key2";
                leaf key2 {
                    type string;
                }
            }
            notification nn {
                typedef Mt {
                    type string {
                        length "1..255";
                    }
                }

                container log {
                    grouping g {
                        notification nn {
                            type j2an;
                        }
                    }
@ret2libc
Copy link

CVE-2019-20394 was assigned to this issue.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants