Comment 4 for bug 1844635

Revision history for this message
guangming liu (guangming1100) wrote :

hi ,

        if ((d + l) > (dest + size)) {
            l = dest - d;
        }
the l will be a very big Unsigned number.

the check was bypassed,try the new poc . i reproduce it with the latest
version on ubuntu . (apt install qemu , i got the latest version)