Open Information Security Foundation

04/11/2024

04:40 PM Suricata Bug #6825: af-packet: possible free of unallocated memory

Seems, that I missed the fact in my analysis, that v2/v3 is union Alexey Simakov

04:37 PM Suricata Bug #6825: af-packet: possible free of unallocated memory

Yes, thats make sense, probably this is false positive detection in this case Alexey Simakov

03/03/2024

04:37 PM Suricata Bug #6826: app-layer/htp: Possible dereference of null in HTPCallbackRequestLine

Also I want to note, that in most context of usage this function its return value is checking on null Alexey Simakov

04:36 PM Suricata Bug #6826 (New): app-layer/htp: Possible dereference of null in HTPCallbackRequestLine

Value returned by htp_connp_get_user_data is used without checking
on null, but this function can return null Alexey Simakov

04:02 PM Suricata Bug #6825 (New): af-packet: possible free of unallocated memory

AFPSetupRing function allocating memory for ptv->ring.v2/3 pointer.
In case of failing of allocating memory jump to... Alexey Simakov

02/28/2024

05:59 PM Suricata Bug #6815: util/decode-mime: Possible derefernce of nullptr

Honestly, I wasnt unable to found some execution paths to case where stack->top null when calling PopStack happened, ... Alexey Simakov

05:52 PM Suricata Bug #6815 (New): util/decode-mime: Possible derefernce of nullptr

There is a PopStack method, which have transitive check for stack->top item and if its not null, curr->next(stack->to... Alexey Simakov

02/08/2024

10:13 AM Suricata Bug #6745 (In Review): util/mime: Memory leak at util-decode-mime.c:MimeDecInitParser

Alexey Simakov

02/06/2024

03:51 PM Suricata Bug #6745 (Closed): util/mime: Memory leak at util-decode-mime.c:MimeDecInitParser

Memory allocated at util-decode-mime.c:2422 for *mimeMsg* structure, could be lost if *state->stack->top == NULL* ,... Alexey Simakov

11/20/2023

03:09 PM Suricata Bug #6294: http2/brotli: subtract with overflow found by sydr-Fuzz

Issue solved Alexey Simakov