New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

FIX: Fix head overflow in MD5-parser. #4736

Merged

kimkulling merged 3 commits into master from kimkulling/fix_heap-buffer-overflow_in_md5_issue-4965

Sep 20, 2022

Member

kimkulling commented Sep 20, 2022

The MD5-Parser does not check if the end of the imported buffer is reached. So when looking for a line end it can happen that a buffer overrun is caused. This PR introduces the check for the end of the buffer.
closes Bug: Issue 49422 in oss-fuzz: assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::MD5::MD5Parser::ParseHeader #4695

kimkulling added 3 commits

September 20, 2022 21:03


          FIX: Fix head overflow in MD5-parser.

f1766c4


          FIX: Caculate buffer end pointer after initing all attributes

1f61f0c


          FIX: Use attribute to fix warning.

6415c0b

kimkulling merged commit 65b14ef into master

kimkulling deleted the kimkulling/fix_heap-buffer-overflow_in_md5_issue-4965 branch

September 20, 2022 19:52

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment