You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
NULL pointer dereference in DXF parser, HATCH code 93 #1468
The std::shared_ptrDRW_Hatch::loop is written to when loading a HATCH entity with code 93. If this occurs before a code 92, the pointer is still NULL, leading to a crash.
Impact
Denial of service.
Proposed Mitigation
Ensure that DRW_Hatch::loop is not NULL before dereferencing at drw_entities.cpp:1808
Operating System and LibreCAD version info
Version: 2.2.0-rc3
Compiler: GNU GCC 7.3.0
Compiled on: Nov 29 2021
Qt Version: 5.12.4
Boost Version: 1.65.1
System: Windows 10 (10.0)
Activity
Added NULL check for hatch code 93
Merge pull request #1469 from eldstal/hatch93 [ci skip]
lordofbikes commentedon Jan 4, 2022
fixed with #1469
eldstal commentedon Jan 25, 2022
This vulnerability has been assigned CVE-2021-45343.