Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

oss-fuzz - fixing overread/write when unpacking pe files #927

Merged
merged 1 commit into from Jun 12, 2023

Conversation

m-sola
Copy link
Contributor

@m-sola m-sola commented May 25, 2023

Added a CLI_CONTAINS buffer wrap check to ensure we aren't reading and writing beyond the exe buffer.

We determined that this bug is not a vulnerability.

@micahsnyder micahsnyder self-assigned this May 25, 2023
libclamav/wwunpack.c Show resolved Hide resolved
Added a CLI_CONTAINS buffer wrap check to ensure we aren't reading and writing beyond the exe buffer
Copy link
Contributor

@micahsnyder micahsnyder left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Update looks good to me. And after finally resolving the jenkins py.xml issue, it passed nicely through the test pipelines.

@micahsnyder micahsnyder merged commit 89cd0df into Cisco-Talos:main Jun 12, 2023
22 of 24 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants