Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Similar to CVE-2017-8782,Integer overflow in function readString,src/actioncompiler/listaction.c:103 #212

Open
b0b0haha opened this issue Dec 2, 2020 · 0 comments

Comments

@b0b0haha
Copy link

b0b0haha commented Dec 2, 2020

Hi ,I use static analysis tool to find a vulnerable func similar to readString(util/read.c)
Just similar to commit befb74,in func readString (src/actioncompiler/listaction.c) ,there should be a check to avoid buflen integer overflow before line 103. What's more ,there should be a check for buf which is initialized in line 95 in case of malloc fails.
image

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant