Project

General

Profile

Actions

Bug #5144

closed

Failed assert DeStateSearchState

Added by Philippe Antoine 7 months ago. Updated 5 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Effort:
Difficulty:
Label:
Needs backport to 5.0, Needs backport to 6.0

Description

Found by oss-fuzz
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44203

Minimized reproducer with rules

alert http any any -> any any (filestore; file.name; content:!"2008.mp4"; sid:2; rev:1;)
alert http any any -> any any (filestore; file.name; content:!"tar.gz"; sid:3; rev:1;)
alert http any any -> any any (file.name; content:"/a/expl/2008.mp4"; startswith; endswith; sid:4; rev:1;)

and attached pcap (which has HTTP with /a/expl/2008.mp4 by the way)

Victor, you added this debug validation code.
Is this a real problem ?


Files

fuzzed2.pcap (1.48 KB) fuzzed2.pcap Philippe Antoine, 02/22/2022 09:33 AM

Related issues 2 (0 open2 closed)

Copied to Bug #5302: Failed assert DeStateSearchStateClosedVictor JulienActions
Copied to Bug #5303: Failed assert DeStateSearchStateClosedVictor JulienActions
Actions #1

Updated by Victor Julien 5 months ago

  • Status changed from Assigned to In Progress
  • Target version changed from TBD to 7.0rc1
Actions #2

Updated by Victor Julien 5 months ago

  • Status changed from In Progress to Closed
  • Private changed from Yes to No
  • Label Needs backport to 5.0, Needs backport to 6.0 added
Actions #3

Updated by Jeff Lucovsky 5 months ago

  • Copied to Bug #5302: Failed assert DeStateSearchState added
Actions #4

Updated by Jeff Lucovsky 5 months ago

  • Copied to Bug #5303: Failed assert DeStateSearchState added
Actions

Also available in: Atom PDF