Project

General

Profile

Actions

Security #8065

open

lua: stack overflow from unbounded stack allocation in LuaPushStringBuffer

Added by Philippe Antoine 4 days ago. Updated about 5 hours ago.

Status:
Resolved
Priority:
High
Assignee:
Target version:
Affected Versions:
Label:
CVE:
Git IDs:
Severity:
MODERATE
Disclosure Date:

Description

=================================================================
==24181==ERROR: AddressSanitizer: stack-overflow on address 0x7000002a63f8 (pc 0x00010a6b4e02 bp 0x700000325e10 sp 0x7000002a6400 T4)
    #0 0x00010a6b4e02 in LuaPushStringBuffer util-lua.c:328
    #1 0x00010ab112a7 in precallC ldo.c:536
    #2 0x00010ab11a78 in luaD_precall ldo.c
    #3 0x00010ab68e1d in luaV_execute lvm.c:1685
    #4 0x00010ab120c3 in luaD_callnoyield ldo.c:662
    #5 0x00010ab0e659 in luaD_rawrunprotected ldo.c:141
    #6 0x00010ab13767 in luaD_pcall ldo.c:964
    #7 0x00010aaee351 in lua_pcallk lapi.c:1064
    #8 0x00010a3711ec in DetectLuaRunMatch detect-lua.c:178
    #9 0x00010a2197ba in DetectEngineInspectGenericList detect-engine.c:1956
    #10 0x00010a446a55 in DetectRun detect.c:190
    #11 0x00010a41efb4 in Detect detect.c:2383
    #12 0x00010a47237a in FlowWorker flow-worker.c:667
    #13 0x00010a618126 in TmThreadsSlotVarRun tm-threads.c:137
    #14 0x00010a622627 in TmThreadsSlotVar tm-threads.c:506
    #15 0x00010c9d3186 in asan_thread_start(void*)+0x46 (libclang_rt.asan_osx_dynamic.dylib:x86_64h+0xdb186)
    #16 0x7ff804bff18a in _pthread_start+0x62 (libsystem_pthread.dylib:x86_64+0x618a)
    #17 0x7ff804bfaae2 in thread_start+0xe (libsystem_pthread.dylib:x86_64+0x1ae2)

SUMMARY: AddressSanitizer: stack-overflow util-lua.c:328 in LuaPushStringBuffer

Subtasks 2 (1 open1 closed)

Security #8066: lua: stack overflow from unbounded stack allocation in LuaPushStringBuffer (8.0.x backport)ClosedVictor JulienActions
Security #8067: lua: stack overflow from unbounded stack allocation in LuaPushStringBuffer (7.0.x backport)AssignedJason IshActions
Actions #1

Updated by OISF Ticketbot 4 days ago

  • Subtask #8066 added
Actions #2

Updated by OISF Ticketbot 4 days ago

  • Label deleted (Needs backport to 8.0)
Actions #3

Updated by OISF Ticketbot 4 days ago

  • Subtask #8067 added
Actions #4

Updated by OISF Ticketbot 4 days ago

  • Label deleted (Needs backport to 7.0)
Actions #5

Updated by Philippe Antoine 2 days ago

  • Status changed from New to Resolved
Actions

Also available in: Atom PDF