The std::shared_ptrDRW_Hatch::loop is written to when loading a HATCH entity with code 93. If this occurs before a code 92, the pointer is still NULL, leading to a crash.
Impact
Denial of service.
Proposed Mitigation
Ensure that DRW_Hatch::loop is not NULL before dereferencing at drw_entities.cpp:1808
Operating System and LibreCAD version info
Version: 2.2.0-rc3
Compiler: GNU GCC 7.3.0
Compiled on: Nov 29 2021
Qt Version: 5.12.4
Boost Version: 1.65.1
System: Windows 10 (10.0)
The text was updated successfully, but these errors were encountered:
eldstal
added a commit
to eldstal/LibreCAD
that referenced
this issue
Dec 19, 2021
Steps to reproduce or sample file
Cause
The
std::shared_ptrDRW_Hatch::loopis written to when loading aHATCHentity with code 93. If this occurs before a code 92, the pointer is stillNULL, leading to a crash.Impact
Denial of service.
Proposed Mitigation
Ensure that
DRW_Hatch::loopis not NULL before dereferencing atdrw_entities.cpp:1808Operating System and LibreCAD version info
Version: 2.2.0-rc3
Compiler: GNU GCC 7.3.0
Compiled on: Nov 29 2021
Qt Version: 5.12.4
Boost Version: 1.65.1
System: Windows 10 (10.0)
The text was updated successfully, but these errors were encountered: