Public bug reported:

Package: sam2p
Version: 0.49.2 - 0.49.4
Source code:https://github.com/pts/sam2p

Details:
In function Image::RGB::RGB at image.cpp (Line 1239,sam2p version:0.49.4):
Key code that causes crashes:
Image::RGB::RGB(Image::Sampled::dimen_t wd_, Image::Sampled::dimen_t ht_, 
unsigned char bpc_) {
  init(0,0,wd_,ht_,bpc_,TY_RGB,3);

Crash Information:
The output with address sanitizer enabled:

> ./sam2p 007-unknown-add-refer EPS: /dev/null 
> This is sam2p 0.49.4.
> Available Loaders: PS PDF JAI PNG JPEG TIFF PNM BMP GIF LBM XPM PCX TGA.
> Available Appliers: XWD Meta Empty BMP PNG TIFF6 TIFF6-JAI JPEG-JAI JPEG PNM 
> GIF89a+LZW XPM PSL1C PSL23+PDF PSL2+PDF-JAI P-TrOpBb.
> ASAN:SIGSEGV
> ==10156==ERROR: AddressSanitizer: SEGV on unknown address 0x10009e757d03 (pc 
> 0x7ffff6ef6b73 bp 0x7fffffffd6b0 sp 0x7fffffffce40 T0)
>     #0 0x7ffff6ef6b72 in __asan_memset 
> (/usr/lib/x86_64-linux-gnu/libasan.so.2+0x8cb72)
>     #1 0x474210 in Image::RGB::RGB(unsigned int, unsigned int, unsigned char) 
> /root/sam2p_ASAN2/sam2p/image.cpp:1239
>     #2 0x431fe6 in LoadPCX /root/sam2p_ASAN2/sam2p/in_pcx.cpp:213
>     #3 0x431fe6 in in_pcx_reader /root/sam2p_ASAN2/sam2p/in_pcx.cpp:533
>     #4 0x475999 in Image::load(Image::Loader::UFD*, SimBuffer::Flat const&, 
> char const*) /root/sam2p_ASAN2/sam2p/image.cpp:1427
>     #5 0x40384a in run_sam2p_engine(Files::FILEW&, Files::FILEW&, char const* 
> const*, bool) /root/sam2p_ASAN2/sam2p/sam2p_main.cpp:1055
>     #6 0x402463 in main /root/sam2p_ASAN2/sam2p/sam2p_main.cpp:1148
>     #7 0x7ffff6ac082f in __libc_start_main 
> (/lib/x86_64-linux-gnu/libc.so.6+0x2082f)
>     #8 0x402d38 in _start (/usr/local/sam2p-asan2/bin/sam2p+0x402d38)
> 
> AddressSanitizer can not provide additional info.
> SUMMARY: AddressSanitizer: SEGV ??:0 __asan_memset
> ==10156==ABORTING

reference link:https://github.com/pts/sam2p/issues/19

** Affects: sam2p (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: security

** Attachment added: "PoC File"
   
https://bugs.launchpad.net/bugs/1751738/+attachment/5063359/+files/007-unknown-add-refer

** Information type changed from Private Security to Public

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1751738

Title:
  Invalid memory address dereference in Image::RGB::RGB (in image.cpp)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/sam2p/+bug/1751738/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to