Menu

#62 Segmentation Fault in gencgm_start() function

xfig
closed
nobody
None
2020-12-21
2019-12-12
Suhwan Song
No

Hi,
I found a Segmentation Fault in gencgm_start() at gencgm.c:233
Please run following command to reproduce it,

fig2dev -L cgm $PoC

Here's log

ASAN:DEADLYSIGNAL
=================================================================
==29566==ERROR: AddressSanitizer: SEGV on unknown address 0x5571b0e7f00c (pc 0x5571b0a958b2 bp 0x7ffcde2ab830 sp 0x7ffcde2ab800 T0)
==29566==The signal is caused by a READ memory access.
    #0 0x5571b0a958b1 in gencgm_start fig2dev-3.2.7b/fig2dev/dev/gencgm.c:233
    #1 0x5571b0a7b946 in gendev_objects fig2dev-3.2.7b/fig2dev/fig2dev.c:995
    #2 0x5571b0a7a2bf in main fig2dev-3.2.7b/fig2dev/fig2dev.c:480
    #3 0x7f9046da9b96 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x21b96)
    #4 0x5571b0a6a979 in _start (fig2dev-3.2.7b+0x6e979)

AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: SEGV fig2dev-3.2.7b/fig2dev/dev/gencgm.c:233 in gencgm_start
==29566==ABORTING

fig2dev Version 3.2.7b
I also tested this in git Commit [3065ab] and can reproduce it.

1 Attachments

Related

Commit: [3065ab]

Discussion

  • tkl

    tkl - 2020-01-06
    • status: open --> pending
     
  • tkl

    tkl - 2020-01-06

    Fixed with commit [41b9bb].

     

    Related

    Commit: [41b9bb]

  • tkl

    tkl - 2020-12-21
    • status: pending --> closed
    • xfig / fig2dev: fig2dev --> xfig
     

Log in to post a comment.