util-linux/text-utils
Sami Kerola 70e3fcf293 colcrt: allocate enough space for data moves [afl & asan]
==2807==ERROR: AddressSanitizer: global-buffer-overflow on address 0x0000013a31f0 at pc 0x0000004e3047 bp 0x7fffcb7df8d0 sp 0x7fffcb7df8c8
READ of size 4 at 0x0000013a31f0 thread T0
    #0 0x4e3046 in move /home/src/util-linux/text-utils/colcrt.c:309:13
    #1 0x4e25b1 in pflush /home/src/util-linux/text-utils/colcrt.c:264:3
    #2 0x4e246d in colcrt /home/src/util-linux/text-utils/colcrt.c:157:4
    #3 0x4e17d4 in main /home/src/util-linux/text-utils/colcrt.c:141:3
    #4 0x7fb0cb2ee60f in __libc_start_main (/usr/lib/libc.so.6+0x2060f)
    #5 0x4362c8 in _start (/home/src/util-linux/colcrt+0x4362c8)

0x0000013a31f0 is located 0 bytes to the right of global variable 'page' defined in 'text-utils/colcrt.c:73:9' (0x1380b40) of size 140976
SUMMARY: AddressSanitizer: global-buffer-overflow /home/src/util-linux/text-utils/colcrt.c:309 move

And another crash:

==4578==ERROR: AddressSanitizer: global-buffer-overflow on address 0x0000013a3d24 at pc 0x0000004e2510 bp 0x7ffc9257b0e0 sp 0x7ffc9257b0d8
READ of size 4 at 0x0000013a3d24 thread T0
    #0 0x4e250f in colcrt /home/src/util-linux/text-utils/colcrt.c:218:8
    #1 0x4e17d4 in main /home/src/util-linux/text-utils/colcrt.c:141:3
    #2 0x7fe0ac94160f in __libc_start_main (/usr/lib/libc.so.6+0x2060f)
    #3 0x4362c8 in _start (/home/src/util-linux/colcrt+0x4362c8)

0x0000013a3d24 is located 8 bytes to the right of global variable 'page' defined in 'text-utils/colcrt.c:73:9' (0x1381240) of size 142044
SUMMARY: AddressSanitizer: global-buffer-overflow /home/src/util-linux/text-utils/colcrt.c:218 colcrt

Reported-by: Alaa Mubaied <alaamubaied@gmail.com>
Signed-off-by: Sami Kerola <kerolasa@iki.fi>
2015-08-10 21:48:42 +01:00
..
Makemodule.am lib/colors: use libtinfo to check terminal capability 2015-02-27 13:57:34 +01:00
col.1 docs: restore minus symbols in long opts 2015-01-20 18:15:30 -05:00
col.c textual: add a docstring to most of the utilities 2015-01-06 11:27:38 +01:00
colcrt.1 docs: restore minus symbols in long opts 2015-01-20 18:15:30 -05:00
colcrt.c colcrt: allocate enough space for data moves [afl & asan] 2015-08-10 21:48:42 +01:00
colrm.1 docs: standardize the phrases for --help and --version in all man pages 2013-10-15 10:28:30 +02:00
colrm.c textual: add a docstring to most of the utilities 2015-01-06 11:27:38 +01:00
column.1 docs: restore minus symbols in long opts 2015-01-20 18:15:30 -05:00
column.c textual: add a docstring to most of the utilities 2015-01-06 11:27:38 +01:00
hexdump-conv.c hexdump: Rename struct _pr to struct hexdump_pr and remove it's typedef 2013-12-02 13:44:21 +01:00
hexdump-display.c hexdump: add highlighting support 2014-02-10 16:01:37 +01:00
hexdump-parse.c hexdump: use 'll' format modifier instead of the non-standard 'q'. 2014-10-31 10:39:18 +01:00
hexdump.1 hexdump: fix man page (-x vs. default output) 2015-07-30 11:49:15 +02:00
hexdump.c colors: cleanup man pages, add hint to usage() 2015-02-25 12:40:06 +01:00
hexdump.h hexdump: add highlighting support 2014-02-10 16:01:37 +01:00
line.1 docs: uniformize the header and footer lines in man pages 2011-08-22 10:39:21 +02:00
line.c textual: add a docstring to most of the utilities 2015-01-06 11:27:38 +01:00
more.1 docs: remove obsolete and unneeded comments from man-page files 2015-01-12 11:03:26 +01:00
more.c more: improve ugly macro 2015-08-05 13:09:12 +02:00
pg.1 docs: remove obsolete and unneeded comments from man-page files 2015-01-12 11:03:26 +01:00
pg.c textual: add a docstring to most of the utilities 2015-01-06 11:27:38 +01:00
rev.1 docs: remove obsolete and unneeded comments from man-page files 2015-01-12 11:03:26 +01:00
rev.c textual: add a docstring to most of the utilities 2015-01-06 11:27:38 +01:00
tailf.1 tailf: deprecated 2015-03-16 14:26:47 +01:00
tailf.c tailf: fix open() return value check [coverity scan] 2015-08-05 11:55:56 +02:00
ul.1 docs: bring several man pages closer to standard formatting 2014-07-16 12:03:25 +02:00
ul.c ul: remove unexplained TERM=lpr override 2015-01-07 21:57:53 +00:00