-
Notifications
You must be signed in to change notification settings - Fork 91
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
OOB read bug found via Strnew_size at Str.c. #284
Comments
On Fri, Nov 17, 2023 at 01:01:33AM -0800, TimChan2001 wrote:
Hi, we found an OOB read bug via Strnew_size at Str.c.
### Reproduction
Build w3m with ASAN, then run
```
./w3m -dump $POC
```
We ran it on a 64-bit Ubuntu 20.04, and it also worked on Ubuntu 18.04.
### ASAN Report
The POC can be found here. [POC](https://github.com/TimChan2001/pocs/raw/main/poc-w3m-r-1)
Can not reproduce on current master.
|
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Hi, we found an OOB read bug via Strnew_size at Str.c.
Reproduction
Build w3m with ASAN, then run
We ran it on a 64-bit Ubuntu 20.04, and it also worked on Ubuntu 18.04.
ASAN Report
The POC can be found here. POC
The text was updated successfully, but these errors were encountered: