bug-texinfo
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

AddressSanitizer reports a heap buffer overflow from skip_node_separator


From: Nathaniel Beaver
Subject: AddressSanitizer reports a heap buffer overflow from skip_node_separator() on malformed info file
Date: Thu, 6 May 2021 22:09:04 -0400
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.10.0

Steps to reproduce:
Compile with -fsanitize=address, then run:

info -f reproduce_bug.info

Expected behavior:

info does not trigger AddressSanitizer errors.

Actual behavior:

AddressSanitizer reports a heap-buffer-overflow from skip_node_separator() in info/search.c:645

Comments:
This file was generated by afl-fuzz and then hand-edited; I don't understand how it creates a heap buffer overflow.

Sincerely,

Nathaniel Beaver

P.S. Version information:

$ git describe --tags
texinfo-6.6-794-ga11612ff66
$ git rev-parse HEAD
a11612ff665391142fc8adb90796741cabb3b683
$ info/ginfo --version | head -n 1
info (GNU texinfo) 6.7.90

Attachment: address-sanitizer.txt
Description: Text document

Attachment: original.info
Description: application/info

Attachment: reproduce_bug.info
Description: application/info


reply via email to

[Prev in Thread] Current Thread [Next in Thread]