[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Bug-ed] invalid free on malformed commands

From: Antonio Diaz Diaz
Subject: Re: [Bug-ed] invalid free on malformed commands
Date: Mon, 09 Jan 2017 12:42:14 +0100
User-agent: Mozilla/5.0 (X11; U; Linux i586; en-US; rv: Gecko/20110420 SeaMonkey/2.0.14

Hi Hanno,

Hanno Böck wrote:
ed can be crashed with some malformed commands:
echo -e "H\n?\{" | ed

Thank you very much for reporting this.

The bug seems to be a call of free on a nonallocated pointer. The bug
was found with the fuzzing tool american fuzzy lop in ed 1.14.

Yes, it was a stupid overlook. I changed a malloc'd buffer for a static one and forgot to remove the corresponding 'free'. I'll release a corrected version shortly.

Best regards,

reply via email to

[Prev in Thread] Current Thread [Next in Thread]