Actions
Bug #7028
closedbase64: heap buffer overflow in RFC 2045 and 4648 modes
Affected Versions:
Effort:
Difficulty:
Label:
Description
==1489==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x502000001011 at pc 0x55c62ca3889c bp 0x7ffe79abb030 sp 0x7ffe79abb028 WRITE of size 1 at 0x502000001011 thread T0 (Suricata-Main) SCARINESS: 31 (1-byte-write-heap-buffer-overflow) #0 0x55c62ca3889b in DecodeBase64Block /src/suricata/src/util-base64.c:93:14 #1 0x55c62ca3889b in DecodeBase64RFC2045 /src/suricata/src/util-base64.c:147:13 #2 0x55c62ca3889b in DecodeBase64 /src/suricata/src/util-base64.c:293:19 #3 0x55c62ca16ced in Base64FuzzTest /src/suricata/src/tests/fuzz/fuzz_decodebase64.c:27:9 #4 0x55c62ca16ced in LLVMFuzzerTestOneInput /src/suricata/src/tests/fuzz/fuzz_decodebase64.c:49:5 #5 0x55c62c8c94c0 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:614:13 #6 0x55c62c8c8ce5 in fuzzer::Fuzzer::RunOne(unsigned char const*, unsigned long, bool, fuzzer::InputInfo*, bool, bool*) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:516:7 #7 0x55c62c8ca4b5 in fuzzer::Fuzzer::MutateAndTestOne() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:760:19 #8 0x55c62c8cb2a5 in fuzzer::Fuzzer::Loop(std::__Fuzzer::vector<fuzzer::SizedFile, std::__Fuzzer::allocator<fuzzer::SizedFile>>&) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:905:5 #9 0x55c62c8b95b6 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:914:6 #10 0x55c62c8e5ae2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 #11 0x7f056a61b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 87b331c034a6458c64ce09c03939e947212e18ce) #12 0x55c62c8aa72d in _start (build-out/fuzz_decodebase64+0x198372d)
Actions