Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

memory leak in parseSWF_DOACTION #72

Open
bestshow opened this issue Jun 7, 2017 · 2 comments

Comments

Projects
None yet
3 participants
@bestshow
Copy link

commented Jun 7, 2017

On libming latest version, a memory leak was found in function parseSWF_DOACTION .

#listswf $FILE
=================================================================
Direct leak of 160 byte(s) in 1 object(s) allocated from:
    #0 0x4e004d in realloc /home/haojun/Downloads/llvm-clang/llvm/projects/compiler-rt/lib/asan/asan_malloc_linux.cc:79
    #1 0x5da8b1 in parseSWF_DOACTION /home/haojun/Downloads/libming-master/util/parser.c:2435:43

Direct leak of 28 byte(s) in 1 object(s) allocated from:
    #0 0x4e004d in realloc /home/haojun/Downloads/llvm-clang/llvm/projects/compiler-rt/lib/asan/asan_malloc_linux.cc:79
    #1 0x543350 in cws2fws /home/haojun/Downloads/libming-master/util/main.c:111:15
    #2 0x5444c6 in readMovieHeader /home/haojun/Downloads/libming-master/util/main.c:198:18
    #3 0x5444c6 in main /home/haojun/Downloads/libming-master/util/main.c:346
    #4 0x7f85ef782b34 in __libc_start_main /usr/src/debug/glibc-2.17-c758a686/csu/../csu/libc-start.c:274

Direct leak of 27 byte(s) in 1 object(s) allocated from:
    #0 0x4dfc96 in malloc /home/haojun/Downloads/llvm-clang/llvm/projects/compiler-rt/lib/asan/asan_malloc_linux.cc:66
    #1 0x5431b3 in cws2fws /home/haojun/Downloads/libming-master/util/main.c:101:13
    #2 0x5444c6 in readMovieHeader /home/haojun/Downloads/libming-master/util/main.c:198:18
    #3 0x5444c6 in main /home/haojun/Downloads/libming-master/util/main.c:346
    #4 0x7f85ef782b34 in __libc_start_main /usr/src/debug/glibc-2.17-c758a686/csu/../csu/libc-start.c:274

215 byte(s) leaked in 3 allocation(s).

testcase : https://github.com/bestshow/p0cs/blob/master/memory-leak-in_parseSWF_DOACTION
Credit : ADLab of Venustech

@strk

This comment has been minimized.

Copy link
Member

commented Jun 7, 2017

Pull request is welcome. Binary-only testcase is invalid, sorry.

@rathann

This comment has been minimized.

Copy link

commented Feb 25, 2019

Apparently this one is assigned CVE-2017-11703 .

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.