Headline
CVE-2022-28072: Fix oobread crash in RAnal.hexagon (tests_64900) ##crash · radareorg/radare2@027cd9b
A heap buffer overflow in r_read_le32 function in radare25.4.2 and 5.4.0.
Skip to content
Actions
Automate any workflow
Packages
Host and manage packages
Security
Find and fix vulnerabilities
Codespaces
Instant dev environments
Copilot
Write better code with AI
Code review
Manage code changes
Issues
Plan and track work
Discussions
Collaborate outside of code
GitHub Sponsors
Fund open source developers
* The ReadME Project
GitHub community articles
- Pricing
Search code, repositories, users, issues, pull requests…
Provide feedback
Saved searches****Use saved searches to filter your results more quickly
Sign up
Notifications
Fork 2.9k
Code
Issues 811
Pull requests 31
Discussions
Actions
Projects 27
Security
Insights
Commit
Permalink
Browse files
Browse the repository at this point in the history
Fix oobread crash in RAnal.hexagon (tests_64900) ##crash
Reported by giantbranch of NSFOCUS TIANJI Lab
- Loading branch information
Showing 1 changed file with 4 additions and 1 deletion.
5 changes: 4 additions & 1 deletion libr/anal/p/anal_hexagon.c
Expand Up
@@ -10,8 +10,11 @@
#include “hexagon_anal.h”
static int hexagon_v6_op(RAnal *anal, RAnalOp *op, ut64 addr, const ut8 *buf, int len, RAnalOpMask mask) {
HexInsn hi = {0};;
HexInsn hi = {0};
ut32 data = 0;
if (len < 4) {
return 0;
}
data = r_read_le32 (buf);
int size = hexagon_disasm_instruction (data, &hi, (ut32) addr);
op->size = size;
Expand Down
0 comments on commit 027cd9b
Please sign in to comment.