hipercdecode buffer overflow detected

Bug #783509 reported by Emanuel Bronshtein
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
foo2zjs (Ubuntu)
New
Undecided
Unassigned

Bug Description

Binary package hint: foo2zjs

when /usr/bin/hipercdecode get 11 characters or more from input (file or stdin) it crash with following message :
"buffer overflow detected".

test case :
emanuel@emanuel-desktop:/tmp$ echo "AAAAAAAAAAA" > /tmp/11
emanuel@emanuel-desktop:/tmp$ hipercdecode /tmp/11
RECTYPE 1094795585 (len=1094795585,0x41414141 cnt=1)
*** buffer overflow detected ***: hipercdecode terminated
======= Backtrace: =========
/lib/tls/i686/cmov/libc.so.6(__fortify_fail+0x50)[0x70b390]
/lib/tls/i686/cmov/libc.so.6(+0xe12ca)[0x70a2ca]
/lib/tls/i686/cmov/libc.so.6(__fread_chk+0x120)[0x70ab50]
hipercdecode[0x804930c]
hipercdecode[0x804a0c6]
/lib/tls/i686/cmov/libc.so.6(__libc_start_main+0xe6)[0x63fbd6]
hipercdecode[0x8048a81]
======= Memory map: ========
00233000-00234000 r-xp 00000000 00:00 0 [vdso]
00629000-0077c000 r-xp 00000000 08:06 526818 /lib/tls/i686/cmov/libc-2.11.1.so
0077c000-0077d000 ---p 00153000 08:06 526818 /lib/tls/i686/cmov/libc-2.11.1.so
0077d000-0077f000 r--p 00153000 08:06 526818 /lib/tls/i686/cmov/libc-2.11.1.so
0077f000-00780000 rw-p 00155000 08:06 526818 /lib/tls/i686/cmov/libc-2.11.1.so
00780000-00783000 rw-p 00000000 00:00 0
00dce000-00de9000 r-xp 00000000 08:06 528700 /lib/ld-2.11.1.so
00de9000-00dea000 r--p 0001a000 08:06 528700 /lib/ld-2.11.1.so
00dea000-00deb000 rw-p 0001b000 08:06 528700 /lib/ld-2.11.1.so
00e59000-00e76000 r-xp 00000000 08:06 522569 /lib/libgcc_s.so.1
00e76000-00e77000 r--p 0001c000 08:06 522569 /lib/libgcc_s.so.1
00e77000-00e78000 rw-p 0001d000 08:06 522569 /lib/libgcc_s.so.1
08048000-08052000 r-xp 00000000 08:06 527791 /usr/bin/hipercdecode
08052000-08053000 r--p 00009000 08:06 527791 /usr/bin/hipercdecode
08053000-08056000 rw-p 0000a000 08:06 527791 /usr/bin/hipercdecode
08056000-0b256000 rw-p 00000000 00:00 0
0b9eb000-0ba0c000 rw-p 00000000 00:00 0 [heap]
b772d000-b772e000 rw-p 00000000 00:00 0
b7746000-b774a000 rw-p 00000000 00:00 0
bfd8b000-bfda0000 rw-p 00000000 00:00 0 [stack]
Aborted

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.