Project

General

Profile

Actions
Copy link

Bug #3791

closed
JL SB

Assert failed in TLS due to integer underflow

Bug #3791: Assert failed in TLS due to integer underflow

Added by Jeff Lucovsky almost 6 years ago. Updated over 5 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Shivani Bhardwaj
Target version:
4.1.9
Affected Versions:
5.0.3
Effort:
Difficulty:
Label:

Description

Found by oss-fuzz :
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22564

Stack trace is :

    #8 0x51f4b0 in SSLv3ParseHandshakeType suricata/src/app-layer-ssl.c:1666:9
    #9 0x51e780 in SSLv3ParseHandshakeProtocol suricata/src/app-layer-ssl.c:1736:18
    #10 0x51cef6 in SSLv3Decode suricata/src/app-layer-ssl.c:2421:26
    #11 0x51b6b7 in SSLDecode suricata/src/app-layer-ssl.c:2608:26
    #12 0x51a9d1 in SSLParseServerRecord suricata/src/app-layer-ssl.c:2658:12
    #13 0x50da1a in AppLayerParserParse suricata/src/app-layer-parser.c:1228:30
    #14 0x4c3860 in LLVMFuzzerTestOneInput suricata/src/tests/fuzz/fuzz_applayerparserparse.c:146:16

Files

clusterfuzz-testcase-minimized-fuzz_applayerparserparse-5111608992071680 (49 Bytes) clusterfuzz-testcase-minimized-fuzz_applayerparserparse-5111608992071680 Philippe Antoine, 06/16/2020 11:19 AM

Related issues 1 (0 open — 1 closed)

Copied from Suricata - Bug #3774: Assert failed in TLS due to integer underflowClosedPhilippe AntoineActions

JL Updated by Jeff Lucovsky almost 6 years ago Actions
Copy link
 #1

  • Copied from Bug #3774: Assert failed in TLS due to integer underflow added

VJ Updated by Victor Julien almost 6 years ago Actions
Copy link
 #2

  • Subject changed from Assert failed in TLS dur to integer underflow to Assert failed in TLS due to integer underflow

SB Updated by Shivani Bhardwaj over 5 years ago Actions
Copy link
 #3

  • Status changed from Assigned to In Review

VJ Updated by Victor Julien over 5 years ago Actions
Copy link
 #4

  • Status changed from In Review to Closed

VJ Updated by Victor Julien over 5 years ago Actions
Copy link
 #5

  • Private changed from Yes to No
Actions
Copy link

Also available in: PDF Atom