Project

General

Profile

Actions
Copy link

Bug #3897

closed

Integer overflow in SCSigOrderByPriorityCompare

Added by Philippe Antoine over 3 years ago. Updated over 3 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Philippe Antoine
Target version:
6.0.0rc1
Affected Versions:
4.1.8, 5.0.3, 6.0.0beta1
Effort:
Difficulty:
Label:
Needs backport, Needs backport to 4.1, Needs backport to 5.0

Description

Found by oss-fuzz :
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24731

The computation sw2->sig->prio - sw1->sig->prio should check for overflows

Related issues 2 (0 open — 2 closed)

Copied to Suricata - Bug #3934: Integer overflow in SCSigOrderByPriorityCompareClosedShivani BhardwajActions
Copied to Suricata - Bug #3935: Integer overflow in SCSigOrderByPriorityCompareClosedJeff LucovskyActions
Actions
Copy link

Also available in: Atom PDF