Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ASN1/BER: fix signed integer overflow #1660

Merged
merged 1 commit into from
Jul 12, 2022
Merged

Commits on Jul 12, 2022

  1. ASN1/BER: fix signed integer overflow

    ```
    protocols/snmp_proto.c:77:23: runtime error: signed integer overflow: 6 + 2147483647 cannot be represented in type 'int'
     #0 0x52f69e in ndpi_search_snmp ndpi/src/lib/protocols/snmp_proto.c:77:23
     ntop#1 0x4c5347 in check_ndpi_detection_func ndpi/src/lib/ndpi_main.c:5211:4
     ntop#2 0x4c5591 in ndpi_check_flow_func ndpi/src/lib/ndpi_main.c:0
     ntop#3 0x4c8903 in ndpi_detection_process_packet ndpi/src/lib/ndpi_main.c:6145:15
     ntop#4 0x4b3712 in LLVMFuzzerTestOneInput ndpi/fuzz/fuzz_process_packet.c:29:5
    [...]
    ```
    Found by oss-fuzzer.
    See: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49057
    IvanNardi committed Jul 12, 2022
    Configuration menu
    Copy the full SHA
    0de98d7 View commit details
    Browse the repository at this point in the history