Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SEGV exits in the function compileSWFActionCode in swftools/lib/action/actioncompiler.c #221

Open
guangbuming opened this issue Feb 12, 2024 · 0 comments

Comments

@guangbuming
Copy link

guangbuming commented Feb 12, 2024

project

https://github.com/matthiaskramm/swftools
version:0.9.2

os info

Ubuntu20.04 TLS

poc

4_poc.zip

build

git clone https://github.com/matthiaskramm/swftools.git
cd swftools
./configure --disable-shared && make
./src/swfc 4_poc

ASAN Info

AddressSanitizer:DEADLYSIGNAL
=================================================================
==2664532==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x00000059d599 bp 0x7fffffffe050 sp 0x7fffffffdf80 T0)
==2664532==The signal is caused by a READ memory access.
==2664532==Hint: address points to the zero page.
    #0 0x59d599 in compileSWFActionCode /home/swftools/lib/action/actioncompiler.c
    #1 0x5275f8 in swf_ActionCompile /home/swftools/lib/modules/swfaction.c:1111:11
    #2 0x4e12af in s_action /home/swftools/src/swfc.c:1966:13
    #3 0x4fec01 in c_action /home/swftools/src/swfc.c
    #4 0x4ee709 in parseArgumentsForCommand /home/swftools/src/swfc.c:4475:5
    #5 0x4ee709 in main /home/swftools/src/swfc.c:4598:2
    #6 0x7ffff7c29082 in __libc_start_main /build/glibc-SzIz7B/glibc-2.31/csu/../csu/libc-start.c:308:16
    #7 0x41d63d in _start (/home/swftools/src/swfc+0x41d63d)

AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: SEGV /home/swftools/lib/action/actioncompiler.c in compileSWFActionCode
==2664532==ABORTING
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant