Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

memory leak in parseSWF_DOACTION #72

Open
bestshow opened this issue Jun 7, 2017 · 3 comments
Open

memory leak in parseSWF_DOACTION #72

bestshow opened this issue Jun 7, 2017 · 3 comments

Comments

@bestshow
Copy link

bestshow commented Jun 7, 2017

On libming latest version, a memory leak was found in function parseSWF_DOACTION .

#listswf $FILE
=================================================================
Direct leak of 160 byte(s) in 1 object(s) allocated from:
    #0 0x4e004d in realloc /home/haojun/Downloads/llvm-clang/llvm/projects/compiler-rt/lib/asan/asan_malloc_linux.cc:79
    #1 0x5da8b1 in parseSWF_DOACTION /home/haojun/Downloads/libming-master/util/parser.c:2435:43

Direct leak of 28 byte(s) in 1 object(s) allocated from:
    #0 0x4e004d in realloc /home/haojun/Downloads/llvm-clang/llvm/projects/compiler-rt/lib/asan/asan_malloc_linux.cc:79
    #1 0x543350 in cws2fws /home/haojun/Downloads/libming-master/util/main.c:111:15
    #2 0x5444c6 in readMovieHeader /home/haojun/Downloads/libming-master/util/main.c:198:18
    #3 0x5444c6 in main /home/haojun/Downloads/libming-master/util/main.c:346
    #4 0x7f85ef782b34 in __libc_start_main /usr/src/debug/glibc-2.17-c758a686/csu/../csu/libc-start.c:274

Direct leak of 27 byte(s) in 1 object(s) allocated from:
    #0 0x4dfc96 in malloc /home/haojun/Downloads/llvm-clang/llvm/projects/compiler-rt/lib/asan/asan_malloc_linux.cc:66
    #1 0x5431b3 in cws2fws /home/haojun/Downloads/libming-master/util/main.c:101:13
    #2 0x5444c6 in readMovieHeader /home/haojun/Downloads/libming-master/util/main.c:198:18
    #3 0x5444c6 in main /home/haojun/Downloads/libming-master/util/main.c:346
    #4 0x7f85ef782b34 in __libc_start_main /usr/src/debug/glibc-2.17-c758a686/csu/../csu/libc-start.c:274

215 byte(s) leaked in 3 allocation(s).

testcase : https://github.com/bestshow/p0cs/blob/master/memory-leak-in_parseSWF_DOACTION
Credit : ADLab of Venustech
@strk
Copy link
Member

strk commented Jun 7, 2017

Pull request is welcome. Binary-only testcase is invalid, sorry.

@hlef hlef mentioned this issue Oct 23, 2017
Closed
@hlef hlef mentioned this issue Jan 27, 2018
Closed
@rathann
Copy link

rathann commented Feb 25, 2019

Apparently this one is assigned CVE-2017-11703 .

@rathann
Copy link

rathann commented Oct 3, 2019

This is still reproducible with current master HEAD. @hlef would you have any fix for this one?

@cxlzff cxlzff mentioned this issue Jun 26, 2021
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@strk @bestshow @rathann