Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Resource exhaustion in LE parsing #1409

Closed
ajakk opened this issue Aug 7, 2021 · 1 comment
Closed

Resource exhaustion in LE parsing #1409

ajakk opened this issue Aug 7, 2021 · 1 comment

Comments

@ajakk
Copy link
Contributor

ajakk commented Aug 7, 2021

Work environment

Questions Answers
File format of the file you reverse (mandatory) LE

Expected behavior

Rizin doesn't use all available memory.

Actual behavior

Rizin uses all available memory.

Steps to reproduce the behavior

The reproduction instructions on the Radare2 bug tracker are sufficient (radareorg/radare2#18923), mostly this:

$ base64 -d <<< TEVMRgIBAW5ldHNwb29reQIAPgABAAAAeABAAAAAAABAAAAAAAAAAAAAAAAAAAAAAAAAAEAAOAABAAAAAAAAAAEAAAAFAAAAAAAAAAAAAAAAAEAAAAAAAAAAQAAAAAAAAAAAAAEAAAAAAAAAAQAAAAAAIAAAAAAAsDxmvwYADwU= > LELF.bin
$ rizin LELF.bin
# Memory is filled

This issue has also been assigned CVE-2021-3673.
@ret2libc ret2libc mentioned this issue Aug 9, 2021
Merged
@XVilka
Copy link
Member

XVilka commented Aug 9, 2021

Fixed by b0a8b76

@XVilka XVilka closed this as completed Aug 9, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@XVilka @ajakk