Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

TLS: fix another interger overflow in certificate processing #1915

Merged
merged 1 commit into from
Mar 30, 2023

Commits on Mar 26, 2023

  1. TLS: fix another interger overflow in certificate processing

    ```
    ==5374==ERROR: AddressSanitizer: SEGV on unknown address 0x60400001a10d (pc 0x00000056e180 bp 0x7ffcca15ae20 sp 0x7ffcca15abe0 T0)
    ==5374==The signal is caused by a WRITE memory access.
    SCARINESS: 30 (wild-addr-write)
        #0 0x56e180 in processCertificateElements ndpi/src/lib/protocols/tls.c:683:79
        ntop#1 0x56c60f in LLVMFuzzerTestOneInput ndpi/fuzz/fuzz_tls_certificate.c:43:3
    ```
    Found by oss-fuzz
    See: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57448
    IvanNardi committed Mar 26, 2023
    Configuration menu
    Copy the full SHA
    787e639 View commit details
    Browse the repository at this point in the history