You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
A heap-buffer-overflow has occurred when running program mp42hls.
=================================================================
==9590==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x60200000ec34 at pc 0x000000484863 bp 0x7ffc0dccc260 sp 0x7ffc0dccc250
READ of size 1 at 0x60200000ec34 thread T0
#0 0x484862 in AP4_Mpeg2TsVideoSampleStream::WriteSample(AP4_Sample&, AP4_DataBuffer&, AP4_SampleDescription*, bool, AP4_ByteStream&) /home/mfc_fuzz/Bento4/Source/C++/Core/Ap4Mpeg2Ts.cpp:663
#1 0x45d6af in WriteSamples /home/mfc_fuzz/Bento4/Source/C++/Apps/Mp42Hls/Mp42Hls.cpp:1271
#2 0x468865 in main /home/mfc_fuzz/Bento4/Source/C++/Apps/Mp42Hls/Mp42Hls.cpp:2088
#3 0x7f960571482f in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x2082f)
#4 0x4547b8 in _start (/home/sandy/swt_fuzz/Bento4/cmakebuild/mp42hls+0x4547b8)
0x60200000ec34 is located 0 bytes to the right of 4-byte region [0x60200000ec30,0x60200000ec34)
allocated by thread T0 here:
#0 0x7f96060ef6b2 in operator new[](unsigned long) (/usr/lib/x86_64-linux-gnu/libasan.so.2+0x996b2)
#1 0x4c4272 in AP4_DataBuffer::ReallocateBuffer(unsigned int) /home/mfc_fuzz/Bento4/Source/C++/Core/Ap4DataBuffer.cpp:210
#2 0x4c3c10 in AP4_DataBuffer::SetDataSize(unsigned int) /home/mfc_fuzz/Bento4/Source/C++/Core/Ap4DataBuffer.cpp:151
#3 0x47efae in AP4_Sample::ReadData(AP4_DataBuffer&, unsigned int, unsigned int) /home/mfc_fuzz/Bento4/Source/C++/Core/Ap4Sample.cpp:147
#4 0x47ee43 in AP4_Sample::ReadData(AP4_DataBuffer&) /home/mfc_fuzz/Bento4/Source/C++/Core/Ap4Sample.cpp:127
#5 0x47be4c in AP4_Track::ReadSample(unsigned int, AP4_Sample&, AP4_DataBuffer&) /home/mfc_fuzz/Bento4/Source/C++/Core/Ap4Track.cpp:473
#6 0x454acf in TrackSampleReader::ReadSample(AP4_Sample&, AP4_DataBuffer&) /home/mfc_fuzz/Bento4/Source/C++/Apps/Mp42Hls/Mp42Hls.cpp:217
#7 0x45abb7 in ReadSample /home/mfc_fuzz/Bento4/Source/C++/Apps/Mp42Hls/Mp42Hls.cpp:976
#8 0x45b5a0 in WriteSamples /home/mfc_fuzz/Bento4/Source/C++/Apps/Mp42Hls/Mp42Hls.cpp:1044
#9 0x468865 in main /home/mfc_fuzz/Bento4/Source/C++/Apps/Mp42Hls/Mp42Hls.cpp:2088
#10 0x7f960571482f in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x2082f)
SUMMARY: AddressSanitizer: heap-buffer-overflow /home/mfc_fuzz/Bento4/Source/C++/Core/Ap4Mpeg2Ts.cpp:663 AP4_Mpeg2TsVideoSampleStream::WriteSample(AP4_Sample&, AP4_DataBuffer&, AP4_SampleDescription*, bool, AP4_ByteStream&)
Shadow bytes around the buggy address:
0x0c047fff9d30: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
0x0c047fff9d40: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
0x0c047fff9d50: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
0x0c047fff9d60: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
0x0c047fff9d70: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
=>0x0c047fff9d80: fa fa fa fa fa fa[04]fa fa fa 04 fa fa fa 01 fa
0x0c047fff9d90: fa fa 04 fa fa fa fd fa fa fa fd fa fa fa fd fd
0x0c047fff9da0: fa fa 02 fa fa fa 00 00 fa fa 00 00 fa fa 01 fa
0x0c047fff9db0: fa fa fd fa fa fa 00 fa fa fa 02 fa fa fa 00 05
0x0c047fff9dc0: fa fa fd fd fa fa 04 fa fa fa 04 fa fa fa fd fa
0x0c047fff9dd0: fa fa 00 fa fa fa 04 fa fa fa fd fa fa fa fd fa
Shadow byte legend (one shadow byte represents 8 application bytes):
Addressable: 00
Partially addressable: 01 02 03 04 05 06 07
Heap left redzone: fa
Heap right redzone: fb
Freed heap region: fd
Stack left redzone: f1
Stack mid redzone: f2
Stack right redzone: f3
Stack partial redzone: f4
Stack after return: f5
Stack use after scope: f8
Global redzone: f9
Global init order: f6
Poisoned by user: f7
Container overflow: fc
Array cookie: ac
Intra object redzone: bb
ASan internal: fe
==9590==ABORTING
A heap-buffer-overflow has occurred when running program mp42hls.
The testing program is mp42hls.
And the input file has been put at:
https://github.com/fCorleone/fuzz_programs/blob/master/Bento4/test5
The text was updated successfully, but these errors were encountered: