Stowage/clamav
2
0
Fork 0
mirror of https://github.com/Cisco-Talos/clamav.git synced 2025-10-19 10:23:17 +00:00
Code Issues Projects Releases Packages Wiki Activity

Fix stack-buffer-overflow in parse_regex due to missing bounds checks (#1486)

Browse source 
Fixes: https://issues.oss-fuzz.com/issues/388922799
This commit is contained in:
Shivam7-1 2025-04-25 01:03:26 +05:30 • committed by GitHub
parent 00886ee90d
commit 41aa292e97
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 2 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
libclamav/regex_suffix.c
View file

@ -274,7 +274,7 @@ static struct node *parse_regex(const uint8_t *p, const size_t pSize, size_t *la
struct node *right;
struct node *tmp;
while (p[*last] != '$' && p[*last] != '\0') {
while (*last < pSize && p[*last] != '$' && p[*last] != '\0') {
switch (p[*last]) {
case '|':
++*last;
@ -356,6 +356,7 @@ static struct node *parse_regex(const uint8_t *p, const size_t pSize, size_t *la
++*last;
/* fall-through */
default:
if (*last >= pSize) break;
right = make_leaf(p[*last]);
v = make_node(concat, v, right);
if (!v) {