segmentation fault in lzo_decompress_buf, stream.c 589
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
lrzip (Ubuntu) |
Confirmed
|
Undecided
|
Unassigned |
Bug Description
Hi, there.
There is invalid memory access in lzo_decompress_buf, stream.c 589 in the lrzip version 0.621 (newest branch 597be1f).
According to the trace, it seems to be an incomplete fix of CVE-2017-8845 and CVE-2019-10654.
System:
DISTRIB_ID=Ubuntu
DISTRIB_
DISTRIB_
DISTRIB_
To reproduce, run:
lrzip -t seg-stream589
This is the output from the terminal:
Decompressing...
Segmentation fault
This is the trace reported by ASAN:
==177389==ERROR: AddressSanitizer: SEGV on unknown address 0x606000010000 (pc 0x7f19986a0144 bp 0x62100001cd54 sp 0x7f1994afed60 T1)
#0 0x7f19986a0143 in lzo1x_decompress (/lib/x86_
#1 0x43faff in lzo_decompress_buf ../stream.c:589
#2 0x43faff in ucompthread ../stream.c:1529
#3 0x7f199804d6b9 in start_thread (/lib/x86_
#4 0x7f199747f41c in clone (/lib/x86_
AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: SEGV ??:0 lzo1x_decompress
Thread T1 created by T0 here:
#0 0x7f19988e51e3 in pthread_create (/usr/lib/
#1 0x451505 in create_pthread ../stream.c:133
#2 0x451505 in fill_buffer ../stream.c:1694
#3 0x451505 in read_stream ../stream.c:1781
#4 0x18 (<unknown module>)
==177389==ABORTING
CVE References
information type: | Private Security → Public |
CVE-2017-8845 and CVE-2019-10654 have not been fixed in Ubuntu 18.04 LTS, so it's quite likely you are hitting those.
Can I make this bug public?