Re: [PATCH] libiberty: prevent buffer overflow when decoding user input

2021-10-12 Thread Luís Ferreira via Gcc-patches
On Tue, 2021-10-12 at 15:40 -0400, Eric Gallager wrote: > On Tue, Oct 12, 2021 at 8:55 AM Luís Ferreira > wrote: > > > > On Fri, 2021-10-08 at 22:11 +0200, Iain Buclaw wrote: > > > Excerpts from Luís Ferreira's message of October 8, 2021 7:08 pm: > > > > On Fri, 2021-10-08 at 18:52 +0200, Iain Bu

Re: [PATCH] libiberty: prevent buffer overflow when decoding user input

2021-10-12 Thread Eric Gallager via Gcc-patches
On Tue, Oct 12, 2021 at 8:55 AM Luís Ferreira wrote: > > On Fri, 2021-10-08 at 22:11 +0200, Iain Buclaw wrote: > > Excerpts from Luís Ferreira's message of October 8, 2021 7:08 pm: > > > On Fri, 2021-10-08 at 18:52 +0200, Iain Buclaw wrote: > > > > Excerpts from Luís Ferreira's message of October

Re: [PATCH] libiberty: prevent buffer overflow when decoding user input

2021-10-12 Thread Luís Ferreira
On Fri, 2021-10-08 at 22:11 +0200, Iain Buclaw wrote: > Excerpts from Luís Ferreira's message of October 8, 2021 7:08 pm: > > On Fri, 2021-10-08 at 18:52 +0200, Iain Buclaw wrote: > > > Excerpts from Luís Ferreira's message of October 7, 2021 8:29 pm: > > > > On Tue, 2021-10-05 at 21:49 -0400, Eric

Re: [PATCH] libiberty: prevent buffer overflow when decoding user input

2021-10-08 Thread Iain Buclaw via Gcc-patches
Excerpts from Luís Ferreira's message of October 8, 2021 7:08 pm: > On Fri, 2021-10-08 at 18:52 +0200, Iain Buclaw wrote: >> Excerpts from Luís Ferreira's message of October 7, 2021 8:29 pm: >> > On Tue, 2021-10-05 at 21:49 -0400, Eric Gallager wrote: >> > > >> > > I can help with the autotools pa

Re: [PATCH] libiberty: prevent buffer overflow when decoding user input

2021-10-08 Thread Luís Ferreira
On Fri, 2021-10-08 at 18:52 +0200, Iain Buclaw wrote: > Excerpts from Luís Ferreira's message of October 7, 2021 8:29 pm: > > On Tue, 2021-10-05 at 21:49 -0400, Eric Gallager wrote: > > > > > > I can help with the autotools part if you can say how precisely > > > you'd > > > like to use them to ad

Re: [PATCH] libiberty: prevent buffer overflow when decoding user input

2021-10-08 Thread Iain Buclaw via Gcc-patches
Excerpts from Luís Ferreira's message of October 7, 2021 8:29 pm: > On Tue, 2021-10-05 at 21:49 -0400, Eric Gallager wrote: >> >> I can help with the autotools part if you can say how precisely you'd >> like to use them to add address sanitization. And as for the OSS >> fuzz part, I think someone

Re: [PATCH] libiberty: prevent buffer overflow when decoding user input

2021-10-07 Thread Luís Ferreira
On Tue, 2021-10-05 at 21:49 -0400, Eric Gallager wrote: > On Tue, Oct 5, 2021 at 1:28 PM Luís Ferreira > wrote: > > > > On Tue, 2021-10-05 at 09:00 -0600, Jeff Law wrote: > > > > > > > > > On 10/4/2021 10:52 AM, Luís Ferreira wrote: > > > > On Thu, 2021-09-23 at 09:50 -0600, Jeff Law wrote: > >

Re: [PATCH] libiberty: prevent buffer overflow when decoding user input

2021-10-05 Thread Eric Gallager via Gcc-patches
On Tue, Oct 5, 2021 at 1:28 PM Luís Ferreira wrote: > > On Tue, 2021-10-05 at 09:00 -0600, Jeff Law wrote: > > > > > > On 10/4/2021 10:52 AM, Luís Ferreira wrote: > > > On Thu, 2021-09-23 at 09:50 -0600, Jeff Law wrote: > > > > > > > > On 9/23/2021 4:16 AM, ibuclaw--- via Gcc-patches wrote: > > >

Re: [PATCH] libiberty: prevent buffer overflow when decoding user input

2021-10-05 Thread Luís Ferreira
On Tue, 2021-10-05 at 09:00 -0600, Jeff Law wrote: > > > On 10/4/2021 10:52 AM, Luís Ferreira wrote: > > On Thu, 2021-09-23 at 09:50 -0600, Jeff Law wrote: > > > > > > On 9/23/2021 4:16 AM, ibuclaw--- via Gcc-patches wrote: > > > > > On 22/09/2021 03:10 Luís Ferreira > > > > > wrote: > > > > >

Re: [PATCH] libiberty: prevent buffer overflow when decoding user input

2021-10-05 Thread Jeff Law via Gcc-patches
On 10/4/2021 10:52 AM, Luís Ferreira wrote: On Thu, 2021-09-23 at 09:50 -0600, Jeff Law wrote: On 9/23/2021 4:16 AM, ibuclaw--- via Gcc-patches wrote: On 22/09/2021 03:10 Luís Ferreira wrote: Currently a stack/heap overflow may happen if a crafted mangle is maliciously used to cause

Re: [PATCH] libiberty: prevent buffer overflow when decoding user input

2021-10-04 Thread Luís Ferreira
On Thu, 2021-09-23 at 09:50 -0600, Jeff Law wrote: > > > On 9/23/2021 4:16 AM, ibuclaw--- via Gcc-patches wrote: > > > On 22/09/2021 03:10 Luís Ferreira wrote: > > > > > >   > > > Currently a stack/heap overflow may happen if a crafted mangle is > > > maliciously used to cause denial of servic

Re: [PATCH] libiberty: prevent buffer overflow when decoding user input

2021-09-23 Thread Jeff Law via Gcc-patches
On 9/23/2021 4:16 AM, ibuclaw--- via Gcc-patches wrote: On 22/09/2021 03:10 Luís Ferreira wrote: Currently a stack/heap overflow may happen if a crafted mangle is maliciously used to cause denial of service, such as intentional crashes by accessing a reserved memory space. Hi, Thanks

Re: [PATCH] libiberty: prevent buffer overflow when decoding user input

2021-09-23 Thread Luís Ferreira via Gcc-patches
Hi, Here is an example of a crafted mangle that can cause heap buffer overflow. ``` fuzzer-results/crash-18b7f0799be49886550876b5ab6bb63e4231979b _D2FGWG4EQe 5f 44 32 46 47 57 47 34 34 34 34 34 34 34 34 34 |_D2FGWG4| 0010 34 34 34 34 34 34 34 34 45 51 65

Re: [PATCH] libiberty: prevent buffer overflow when decoding user input

2021-09-23 Thread ibuclaw--- via Gcc-patches
> On 22/09/2021 03:10 Luís Ferreira wrote: > > > Currently a stack/heap overflow may happen if a crafted mangle is > maliciously used to cause denial of service, such as intentional > crashes > by accessing a reserved memory space. > Hi, Thanks for this. Is there a test that could trigger t

[PATCH] libiberty: prevent buffer overflow when decoding user input

2021-09-21 Thread Luís Ferreira
Currently a stack/heap overflow may happen if a crafted mangle is maliciously used to cause denial of service, such as intentional crashes by accessing a reserved memory space. Signed-off-by: Luís Ferreira --- libiberty/d-demangle.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --g