Menu

#224 Heap overflow (read) in ExtHandler.cpp

v1.0 (example)
open
nobody
None
5
2019-07-26
2019-07-26
Yu Han
No

Hi

I found this problem in p7zip 16.02 on Ubuntu when extracting files of EXT format.
NArchive::NExt::NHandler::Open2 function will call function Parse() to parse "node" in ExtHandler.cpp line 1291. It causes heap overflow for multiple READ actions in parse function, like:

LE_32(0x04, FileSize)

Please reply if you want to get the example file for this problem.

Discussion


Log in to post a comment.

MongoDB Logo MongoDB