Hello!

Testing upstream busybox (bee252057c7ac69909b8aafeafb8e414e34c7685)
and found issue with ip utility:
```
./busybox_unstripped ip r s /::
networking/libiproute/utils.c:260:28: runtime error: left shift of
negative value -1
=================================================================
==98540==ERROR: AddressSanitizer: negative-size-param: (size=-4)
    #0 0x710d4aacc56a in MemcmpInterceptorCommon(void*, int (*)(void
const*, void const*, unsigned long), void const*, void const*,
unsigned long) 
../../.././libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc:813
    #1 0x710d4aacc6f3 in memcmp
../../.././libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc:845
    #2 0x710d4aacc6f3 in memcmp
../../.././libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc:840
    #3 0x613c9c99463b in inet_addr_match networking/libiproute/utils.c:260

Address 0x710d47e00024 is located in stack of thread T0 at offset 36 in frame
    #0 0x613c9c981bed in print_route networking/libiproute/iproute.c:69

  This frame has 3 object(s):
    [32, 52) 'dst' (line 73) <== Memory access at offset 36 is inside
this variable
    [96, 116) 'src' (line 74)
    [160, 408) 'tb' (line 72)
HINT: this may be a false positive if your program uses some custom
stack unwind mechanism, swapcontext or vfork
      (longjmp and C++ exceptions *are* supported)
SUMMARY: AddressSanitizer: negative-size-param
../../.././libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc:813
in MemcmpInterceptorCommon(void*, int (*)(void const*, void const*,
unsigned long), void const*, void const*, unsigned long)
==98540==ABORTING
```

Does anyone face this problem?

P.S. Can't use bugtracker(
_______________________________________________
busybox mailing list
[email protected]
https://lists.busybox.net/mailman/listinfo/busybox

Reply via email to