Project

General

Profile

Actions
Copy link

Bug #3687

closed

Null dereference in DetectEngineSignatureIsDuplicate

Added by Philippe Antoine almost 4 years ago. Updated almost 4 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Philippe Antoine
Target version:
6.0.0beta1
Affected Versions:
5.0.3
Effort:
Difficulty:
Label:
Needs backport

Description

Found by oss-fuzz :
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21973

Signatures input is 

alert tcp any any -> any any sid:6;
alert tcp any any <> any , 
alert tcp any any -> any any sid:6;rev:1;
alert tcp any any -> any any rev:1;

Related issues 2 (0 open — 2 closed)

Copied to Suricata - Bug #3742: Null dereference in DetectEngineSignatureIsDuplicateClosedShivani BhardwajActions
Copied to Suricata - Bug #3743: Null dereference in DetectEngineSignatureIsDuplicateClosedJeff LucovskyActions
Actions
Copy link
 #1

Updated by Philippe Antoine almost 4 years ago

  • Status changed from New to Assigned
  • Assignee set to Philippe Antoine
  • Target version set to 6.0.0beta1
  • Affected Versions 5.0.3 added
Actions
Copy link
 #2

Updated by Philippe Antoine almost 4 years ago

  • Label Needs backport added
Actions
Copy link
 #3

Updated by Philippe Antoine almost 4 years ago

Another reproducer is

alert tcp any any -> any any sid:6;rev:1;
alert tcp any any <> any 1 rev:1;sid:2;
alert tcp any any -> any any sid:6;rev:2;
alert tcp any any -> any 1 rev:2;sid:2;
Actions
Copy link
 #4

Updated by Philippe Antoine almost 4 years ago

  • Status changed from Assigned to In Review
Actions
Copy link
 #5

Updated by Jeff Lucovsky almost 4 years ago

  • Copied to Bug #3742: Null dereference in DetectEngineSignatureIsDuplicate added
Actions
Copy link
 #6

Updated by Jeff Lucovsky almost 4 years ago

  • Copied to Bug #3743: Null dereference in DetectEngineSignatureIsDuplicate added
Actions
Copy link
 #9

Updated by Victor Julien almost 4 years ago

  • Status changed from In Review to Closed
  • Private changed from Yes to No
Actions
Copy link
 #10

Updated by Philippe Antoine almost 4 years ago

Should we add a regression test for this ?

Actions
Copy link

Also available in: Atom PDF