Project

General

Profile

Actions
Copy link

Bug #7567

closed

dcerpc: assertion triggered !((res.needed + res.consumed < input_len))

Added by Philippe Antoine 5 months ago. Updated 13 days ago.

Status:
Closed
Priority:
Normal
Assignee:
Philippe Antoine
Target version:
8.0.0-beta1
Affected Versions:
Effort:
Difficulty:
Label:

Description

Found by oss-fuzz
https://issues.oss-fuzz.com/u/1/issues/397731135

No need to backport
Regression range is https://github.com/OISF/suricata/compare/cfbf8fda94771461844b0fc805af5476f92328ce...cbda276aebf4657fed709368028d6b21acf5c4e7 when adding support of AppLayerResult::incomplete

Files

dcerpc.pcap (3.51 KB) dcerpc.pcap Philippe Antoine, 02/21/2025 09:28 AM
Actions
Copy link
 #1

Updated by Philippe Antoine 5 months ago

  • Status changed from New to In Review

Gitlab MR

Actions
Copy link
 #2

Updated by Philippe Antoine 5 months ago

Reproducer with ./src/suricata -r dcerpc.pcap -c fuzz.yaml -k none -l log --disable-detection (stream.midstream=true)

Actions
Copy link
 #4

Updated by Philippe Antoine 5 months ago

  • Status changed from In Review to Closed
Actions
Copy link
 #5

Updated by Jason Ish 13 days ago

  • Private changed from Yes to No
Actions
Copy link

Also available in: Atom PDF