Project

General

Profile

Actions
Copy link

Bug #8465

closed
JI JI

config: use after free when include sequence redefines parent of dotted key

Bug #8465: config: use after free when include sequence redefines parent of dotted key

Added by Jason Ish 6 months ago. Updated 14 days ago.

Status:
Closed
Priority:
Normal
Assignee:
Jason Ish
Target version:
9.0.0-beta1
Affected Versions:
Effort:
Difficulty:
Label:

Description

For example, a suricata.yaml that loos like:

%YAML 1.1
---
outputs.x: val
include:
  - ./include.yaml

and include.yaml:
%YAML 1.1
---
outputs: []

The override cleaned up after itself, but the node is still marked a sequence.

Reported by: Trail of Bits, in collaboration with Anthropic

Subtasks 1 (0 open — 1 closed)

Bug #9093: config: use after free when include sequence redefines parent of dotted key (8.0.x backport)ClosedPhilippe AntoineActions

JI Updated by Jason Ish 6 months ago Actions
Copy link
 #1

  • Description updated (diff)

JI Updated by Jason Ish 6 months ago Actions
Copy link
 #2

  • Status changed from In Progress to In Review

JI Updated by Jason Ish 6 months ago Actions
Copy link
 #3

  • Status changed from In Review to Closed

VJ Updated by Victor Julien 23 days ago Actions
Copy link
 #4

  • Status changed from Closed to Resolved
  • Label Needs backport to 8.0 added

OT Updated by OISF Ticketbot 23 days ago Actions
Copy link
 #5

  • Subtask #9093 added

OT Updated by OISF Ticketbot 23 days ago Actions
Copy link
 #6

  • Label deleted (Needs backport to 8.0)

PA Updated by Philippe Antoine 14 days ago Actions
Copy link
 #7

  • Status changed from Resolved to Closed
Actions
Copy link

Also available in: PDF Atom