We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
tested in Ubuntu 16.04, 64bit, libming(master a89a619)
$ listswf $POC
https://github.com/Marsman1996/pocs/blob/master/libming/poc1
==29773==ERROR: AddressSanitizer failed to allocate 0x400002000 (17179877376) bytes of LargeMmapAllocator (errno: 12) ==29773==Process memory map follows: 0x000000400000-0x000000456000 /home/marsman/Desktop/crashana/libming/libming/build_asan/bin/listswf 0x000000655000-0x000000657000 /home/marsman/Desktop/crashana/libming/libming/build_asan/bin/listswf 0x000000657000-0x000000666000 /home/marsman/Desktop/crashana/libming/libming/build_asan/bin/listswf 0x000000666000-0x000000668000 0x00007fff7000-0x00008fff7000 0x00008fff7000-0x02008fff7000 0x02008fff7000-0x10007fff8000 0x600000000000-0x602000000000 0x602000000000-0x602000010000 0x602000010000-0x603000000000 0x603000000000-0x603000010000 0x603000010000-0x606000000000 0x606000000000-0x606000010000 0x606000010000-0x60d000000000 0x60d000000000-0x60d000010000 0x60d000010000-0x60e000000000 0x60e000000000-0x60e000010000 0x60e000010000-0x611000000000 0x611000000000-0x611000010000 0x611000010000-0x612000000000 0x612000000000-0x612000010000 0x612000010000-0x613000000000 0x613000000000-0x613000010000 0x613000010000-0x616000000000 0x616000000000-0x616000020000 0x616000020000-0x618000000000 0x618000000000-0x618000020000 0x618000020000-0x619000000000 0x619000000000-0x619000020000 0x619000020000-0x621000000000 0x621000000000-0x621000020000 0x621000020000-0x623000000000 0x623000000000-0x623000020000 0x623000020000-0x624000000000 0x624000000000-0x624000020000 0x624000020000-0x640000000000 0x640000000000-0x640000003000 0x7f30b28fe000-0x7f30b4a00000 0x7f30b4b00000-0x7f30b4c00000 0x7f30b4ce6000-0x7f30b7038000 0x7f30b7038000-0x7f30b70dc000 /usr/lib/x86_64-linux-gnu/libfreetype.so.6.12.1 0x7f30b70dc000-0x7f30b72db000 /usr/lib/x86_64-linux-gnu/libfreetype.so.6.12.1 0x7f30b72db000-0x7f30b72e1000 /usr/lib/x86_64-linux-gnu/libfreetype.so.6.12.1 0x7f30b72e1000-0x7f30b72e2000 /usr/lib/x86_64-linux-gnu/libfreetype.so.6.12.1 0x7f30b72e2000-0x7f30b7306000 /lib/x86_64-linux-gnu/libpng12.so.0.54.0 0x7f30b7306000-0x7f30b7505000 /lib/x86_64-linux-gnu/libpng12.so.0.54.0 0x7f30b7505000-0x7f30b7506000 /lib/x86_64-linux-gnu/libpng12.so.0.54.0 0x7f30b7506000-0x7f30b7507000 /lib/x86_64-linux-gnu/libpng12.so.0.54.0 0x7f30b7507000-0x7f30b751d000 /lib/x86_64-linux-gnu/libgcc_s.so.1 0x7f30b751d000-0x7f30b771c000 /lib/x86_64-linux-gnu/libgcc_s.so.1 0x7f30b771c000-0x7f30b771d000 /lib/x86_64-linux-gnu/libgcc_s.so.1 0x7f30b771d000-0x7f30b7825000 /lib/x86_64-linux-gnu/libm-2.23.so 0x7f30b7825000-0x7f30b7a24000 /lib/x86_64-linux-gnu/libm-2.23.so 0x7f30b7a24000-0x7f30b7a25000 /lib/x86_64-linux-gnu/libm-2.23.so 0x7f30b7a25000-0x7f30b7a26000 /lib/x86_64-linux-gnu/libm-2.23.so 0x7f30b7a26000-0x7f30b7a29000 /lib/x86_64-linux-gnu/libdl-2.23.so 0x7f30b7a29000-0x7f30b7c28000 /lib/x86_64-linux-gnu/libdl-2.23.so 0x7f30b7c28000-0x7f30b7c29000 /lib/x86_64-linux-gnu/libdl-2.23.so 0x7f30b7c29000-0x7f30b7c2a000 /lib/x86_64-linux-gnu/libdl-2.23.so 0x7f30b7c2a000-0x7f30b7c42000 /lib/x86_64-linux-gnu/libpthread-2.23.so 0x7f30b7c42000-0x7f30b7e41000 /lib/x86_64-linux-gnu/libpthread-2.23.so 0x7f30b7e41000-0x7f30b7e42000 /lib/x86_64-linux-gnu/libpthread-2.23.so 0x7f30b7e42000-0x7f30b7e43000 /lib/x86_64-linux-gnu/libpthread-2.23.so 0x7f30b7e43000-0x7f30b7e47000 0x7f30b7e47000-0x7f30b8007000 /lib/x86_64-linux-gnu/libc-2.23.so 0x7f30b8007000-0x7f30b8207000 /lib/x86_64-linux-gnu/libc-2.23.so 0x7f30b8207000-0x7f30b820b000 /lib/x86_64-linux-gnu/libc-2.23.so 0x7f30b820b000-0x7f30b820d000 /lib/x86_64-linux-gnu/libc-2.23.so 0x7f30b820d000-0x7f30b8211000 0x7f30b8211000-0x7f30b82d3000 /home/marsman/Desktop/crashana/libming/libming/build_asan/lib/libming.so.1.4.8 0x7f30b82d3000-0x7f30b84d3000 /home/marsman/Desktop/crashana/libming/libming/build_asan/lib/libming.so.1.4.8 0x7f30b84d3000-0x7f30b84d5000 /home/marsman/Desktop/crashana/libming/libming/build_asan/lib/libming.so.1.4.8 0x7f30b84d5000-0x7f30b84e7000 /home/marsman/Desktop/crashana/libming/libming/build_asan/lib/libming.so.1.4.8 0x7f30b84e7000-0x7f30b84ea000 0x7f30b84ea000-0x7f30b8503000 /lib/x86_64-linux-gnu/libz.so.1.2.8 0x7f30b8503000-0x7f30b8702000 /lib/x86_64-linux-gnu/libz.so.1.2.8 0x7f30b8702000-0x7f30b8703000 /lib/x86_64-linux-gnu/libz.so.1.2.8 0x7f30b8703000-0x7f30b8704000 /lib/x86_64-linux-gnu/libz.so.1.2.8 0x7f30b8704000-0x7f30b87f8000 /usr/lib/x86_64-linux-gnu/libasan.so.2.0.0 0x7f30b87f8000-0x7f30b89f8000 /usr/lib/x86_64-linux-gnu/libasan.so.2.0.0 0x7f30b89f8000-0x7f30b89fb000 /usr/lib/x86_64-linux-gnu/libasan.so.2.0.0 0x7f30b89fb000-0x7f30b89fc000 /usr/lib/x86_64-linux-gnu/libasan.so.2.0.0 0x7f30b89fc000-0x7f30b9671000 0x7f30b9671000-0x7f30b9697000 /lib/x86_64-linux-gnu/ld-2.23.so 0x7f30b9840000-0x7f30b987a000 0x7f30b987a000-0x7f30b9896000 0x7f30b9896000-0x7f30b9897000 /lib/x86_64-linux-gnu/ld-2.23.so 0x7f30b9897000-0x7f30b9898000 /lib/x86_64-linux-gnu/ld-2.23.so 0x7f30b9898000-0x7f30b9899000 0x7fff4fa5d000-0x7fff4fa7e000 [stack] 0x7fff4fa91000-0x7fff4fa94000 [vvar] 0x7fff4fa94000-0x7fff4fa96000 [vdso] 0xffffffffff600000-0xffffffffff601000 [vsyscall] ==29773==End of process memory map. ==29773==AddressSanitizer CHECK failed: ../../../../src/libsanitizer/sanitizer_common/sanitizer_posix.cc:121 "(("unable to mmap" && 0)) != (0)" (0x0, 0x0) #0 0x7f30b87a4631 (/usr/lib/x86_64-linux-gnu/libasan.so.2+0xa0631) #1 0x7f30b87a95e3 in __sanitizer::CheckFailed(char const*, int, char const*, unsigned long long, unsigned long long) (/usr/lib/x86_64-linux-gnu/libasan.so.2+0xa55e3) #2 0x7f30b87b1611 (/usr/lib/x86_64-linux-gnu/libasan.so.2+0xad611) #3 0x7f30b8726c0c (/usr/lib/x86_64-linux-gnu/libasan.so.2+0x22c0c) #4 0x7f30b879c5d2 in malloc (/usr/lib/x86_64-linux-gnu/libasan.so.2+0x985d2) #5 0x436967 in parseABC_NS_SET_INFO ../../util/parser.c:3081 #6 0x437314 in parseABC_CONSTANT_POOL ../../util/parser.c:3195 #7 0x4391b4 in parseABC_FILE ../../util/parser.c:3430 #8 0x439c05 in parseSWF_DOABC ../../util/parser.c:3485 #9 0x40211d in readMovie ../../util/main.c:269 #10 0x40211d in main ../../util/main.c:354 #11 0x7f30b7e6782f in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x2082f) #12 0x402978 in _start (/home/marsman/Desktop/crashana/libming/libming/build_asan/bin/listswf+0x402978)
Addition: This bug was found with mem-AFL, which is based on AFL. Mem-AFL is developed by Yanhao(unfuzzable123@gmail.com) & Marsman1996(lqliuyuwei@outlook.com)
The text was updated successfully, but these errors were encountered:
No branches or pull requests
tested in Ubuntu 16.04, 64bit, libming(master a89a619)
$ listswf $POC
https://github.com/Marsman1996/pocs/blob/master/libming/poc1
Addition: This bug was found with mem-AFL, which is based on AFL. Mem-AFL is developed by Yanhao(unfuzzable123@gmail.com) & Marsman1996(lqliuyuwei@outlook.com)
The text was updated successfully, but these errors were encountered: