Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2020-23910: A stack overflow in genhash.c:506:7 causes Segmentation fault · Issue #396 · vlm/asn1c

Stack-based buffer overflow vulnerability in asn1c through v0.9.28 via function genhash_get in genhash.c.

CVE
#vulnerability#ubuntu#c++#buffer_overflow

System info

Ubuntu x86_64, clang 6.0, asn1c (latest master 00fa516)

Configure

CFLAGS="-g -fsanitize=address" LDFLAGS="-fsanitize=address" ./configure

Command line

./asn1c/asn1c -EF @@

Output

Segmentation fault (core dumped)

AddressSanitizer output

AddressSanitizer:DEADLYSIGNAL
=================================================================
==31836==ERROR: AddressSanitizer: stack-overflow on address 0x7ffd74c5adb8 (pc 0x0000004afe97 bp 0x7ffd74c5b610 sp 0x7ffd74c5ad80 T0)
    #0 0x4afe96 in __interceptor_strcmp.part.253 (/home/seviezhou/asn1c/asn1c/asn1c+0x4afe96)
    #1 0x577881 in genhash_get /home/seviezhou/asn1c/libasn1common/genhash.c:506:7
    #2 0x591bf4 in asn1f_lookup_in_module /home/seviezhou/asn1c/libasn1fix/asn1fix_retrieve.c:33:26
    #3 0x59380f in asn1f_lookup_symbol_impl /home/seviezhou/asn1c/libasn1fix/asn1fix_retrieve.c:328:22
    #4 0x59e394 in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:287:17
    #5 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #6 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #7 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #8 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #9 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #10 0x59c11e in asn1constraint_pullup /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:74:11
    #11 0x59e493 in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:300:15
    #12 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #13 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #14 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #15 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #16 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #17 0x59c11e in asn1constraint_pullup /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:74:11
    #18 0x59e493 in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:300:15
    #19 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #20 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #21 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #22 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #23 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #24 0x59c11e in asn1constraint_pullup /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:74:11
    #25 0x59e493 in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:300:15
    #26 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #27 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #28 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #29 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #30 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #31 0x59c11e in asn1constraint_pullup /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:74:11
    #32 0x59e493 in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:300:15
    #33 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #34 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #35 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #36 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #37 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #38 0x59c11e in asn1constraint_pullup /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:74:11
    #39 0x59e493 in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:300:15
    #40 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #41 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #42 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #43 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #44 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #45 0x59c11e in asn1constraint_pullup /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:74:11
    #46 0x59e493 in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:300:15
    #47 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #48 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #49 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #50 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #51 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #52 0x59c11e in asn1constraint_pullup /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:74:11
    #53 0x59e493 in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:300:15
    #54 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #55 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #56 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #57 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #58 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #59 0x59c11e in asn1constraint_pullup /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:74:11
    #60 0x59e493 in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:300:15
    #61 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #62 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #63 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #64 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #65 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #66 0x59c11e in asn1constraint_pullup /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:74:11
    #67 0x59e493 in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:300:15
    #68 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #69 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #70 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #71 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #72 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #73 0x59c11e in asn1constraint_pullup /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:74:11
    #74 0x59e493 in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:300:15
    #75 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #76 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #77 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #78 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #79 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #80 0x59c11e in asn1constraint_pullup /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:74:11
    #81 0x59e493 in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:300:15
    #82 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #83 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #84 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #85 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #86 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #87 0x59c11e in asn1constraint_pullup /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:74:11
    #88 0x59e493 in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:300:15
    #89 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #90 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #91 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #92 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #93 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #94 0x59c11e in asn1constraint_pullup /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:74:11
    #95 0x59e493 in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:300:15
    #96 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #97 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #98 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #99 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #100 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #101 0x59c11e in asn1constraint_pullup /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:74:11
    #102 0x59e493 in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:300:15
    #103 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #104 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #105 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #106 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #107 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #108 0x59c11e in asn1constraint_pullup /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:74:11
    #109 0x59e493 in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:300:15
    #110 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #111 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #112 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #113 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #114 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #115 0x59c11e in asn1constraint_pullup /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:74:11
    #116 0x59e493 in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:300:15
    #117 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #118 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #119 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #120 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #121 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #122 0x59c11e in asn1constraint_pullup /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:74:11
    #123 0x59e493 in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:300:15
    #124 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #125 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #126 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #127 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #128 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #129 0x59c11e in asn1constraint_pullup /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:74:11
    #130 0x59e493 in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:300:15
    #131 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #132 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #133 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #134 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #135 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #136 0x59c11e in asn1constraint_pullup /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:74:11
    #137 0x59e493 in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:300:15
    #138 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #139 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #140 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #141 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #142 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #143 0x59c11e in asn1constraint_pullup /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:74:11
    #144 0x59e493 in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:300:15
    #145 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #146 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #147 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #148 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #149 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #150 0x59c11e in asn1constraint_pullup /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:74:11
    #151 0x59e493 in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:300:15
    #152 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #153 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #154 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #155 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #156 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #157 0x59c11e in asn1constraint_pullup /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:74:11
    #158 0x59e493 in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:300:15
    #159 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #160 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #161 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #162 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #163 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #164 0x59c11e in asn1constraint_pullup /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:74:11
    #165 0x59e493 in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:300:15
    #166 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #167 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #168 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #169 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #170 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #171 0x59c11e in asn1constraint_pullup /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:74:11
    #172 0x59e493 in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:300:15
    #173 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #174 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #175 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #176 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #177 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #178 0x59c11e in asn1constraint_pullup /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:74:11
    #179 0x59e493 in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:300:15
    #180 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #181 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #182 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #183 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #184 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #185 0x59c11e in asn1constraint_pullup /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:74:11
    #186 0x59e493 in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:300:15
    #187 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #188 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #189 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #190 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #191 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #192 0x59c11e in asn1constraint_pullup /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:74:11
    #193 0x59e493 in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:300:15
    #194 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #195 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #196 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #197 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #198 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #199 0x59c11e in asn1constraint_pullup /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:74:11
    #200 0x59e493 in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:300:15
    #201 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #202 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #203 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #204 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #205 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #206 0x59c11e in asn1constraint_pullup /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:74:11
    #207 0x59e493 in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:300:15
    #208 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #209 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #210 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #211 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #212 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #213 0x59c11e in asn1constraint_pullup /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:74:11
    #214 0x59e493 in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:300:15
    #215 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #216 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #217 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #218 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #219 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #220 0x59c11e in asn1constraint_pullup /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:74:11
    #221 0x59e493 in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:300:15
    #222 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #223 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #224 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #225 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #226 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #227 0x59c11e in asn1constraint_pullup /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:74:11
    #228 0x59e493 in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:300:15
    #229 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #230 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #231 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #232 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #233 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #234 0x59c11e in asn1constraint_pullup /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:74:11
    #235 0x59e493 in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:300:15
    #236 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #237 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #238 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #239 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #240 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #241 0x59c11e in asn1constraint_pullup /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:74:11
    #242 0x59e493 in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:300:15
    #243 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #244 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #245 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #246 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #247 0x59fb1a in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:227:15
    #248 0x59c11e in asn1constraint_pullup /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:74:11
    #249 0x59e493 in asn1constraint_resolve /home/seviezhou/asn1c/libasn1fix/asn1fix_constraint.c:300:15

SUMMARY: AddressSanitizer: stack-overflow (/home/seviezhou/asn1c/asn1c/asn1c+0x4afe96) in __interceptor_strcmp.part.253
==31836==ABORTING

POC

stack-overflow-genhash_get-genhash-506.zip

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907