SEGV in matio-1.5.17/src/mat.c:1558 Mat_VarFree

Bug #1859263 reported by Binbin Li
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
libmatio (Ubuntu)
New
Undecided
Unassigned

Bug Description

SEGV in matio-1.5.17/src/mat.c:1558 Mat_VarFree. Detial log as flollow: (POC in attachment)

lbb@lbb: ./matio-1.5.17/build/bin/matdump poc_m017

InflateData: inflate returned data error
InflateData: inflate returned data error
...
InflateSkip: inflate returned data error
InflateDataType: inflate returned data error
InflateData: inflate returned data error
InflateSkip: inflate returned data error
      Name: struct1
      Rank: 2
Class Type: Structure
Fields[2] {
      Name: a
      Rank: 2
Dimensions: 1 x 1
Class Type: Sparse Array (complex)
      Name: b
      Rank: 2
Dimensions: 1 x 1
Class Type: Sparse Array (complex)
}
ASAN:SIGSEGV
=================================================================
==15528==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x7fe9950b01b2 bp 0x7ffebe07cd70 sp 0x7ffebe07cca0 T0)
    #0 0x7fe9950b01b1 in Mat_VarFree /matio-1.5.17/src/mat.c:1558:26
    #1 0x7fe9950b0690 in Mat_VarFree /matio-1.5.17/src/mat.c:1476:25
    #2 0x4dc4ea in main /matio-1.5.17/tools/matdump.c:944:17
    #3 0x7fe993eb382f in __libc_start_main /build/glibc-LK5gWL/glibc-2.23/csu/../csu/libc-start.c:291
    #4 0x435b18 in _start (/matio-1.5.17/build/bin/matdump+0x435b18)

AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: SEGV /matio-1.5.17/src/mat.c:1558 Mat_VarFree
==15528==ABORTING

Tags: matio segv
Revision history for this message
Binbin Li (libbin) wrote :
  • POC Edit (201 bytes, application/octet-stream)
description: updated
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Bug attachments

Remote bug watches

Bug watches keep track of this bug in other bug trackers.