Actions
Bug #4071
closedNull dereference in ipv4hdr GetData
Affected Versions:
Effort:
Difficulty:
Label:
Needs backport to 5.0
Description
Found by oss-fuzz
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24288
Reproducer is./src/suricata -r fail.pcap -S ip4hdr.rule
with ip4hdr.rule being a rule using ipv4.hdr alert ip any any -> any any (ipv4.hdr; content:"|00 00|"; offset:4; depth:2; sid:1234;)
The bug seems to be present for tcphdr as well
Files
Updated by Philippe Antoine over 3 years ago
Pcap reproducer for tcp.hdr rule
Updated by Philippe Antoine over 3 years ago
The fact that oss-fuzz produced unreproducible crashes seems to tell that DetectEngineReload does not reset everything.
I guess it does not somehow reset the call to DetectBufferSetActiveList(s, g_ipv4hdr_buffer_id)
Updated by Victor Julien over 3 years ago
- Priority changed from Normal to High
- Label Needs backport to 5.0 added
Updated by Philippe Antoine over 3 years ago
Should I create private S-V tests for these ?
Updated by Jeff Lucovsky over 3 years ago
- Copied to Bug #4132: Null dereference in ipv4hdr GetData added
Updated by Victor Julien over 3 years ago
- Status changed from In Review to Closed
Actions