[gnutls-devel] libtasn1 | run out of memory (#53)

[Read-only notification of GnuTLS library development activities]

Fanny-wen created an issue: https://gitlab.com/gnutls/libtasn1/-/issues/53



## Description of problem:
run out of memory at asn1Coding _asn1_add_single_node

## Version of libtasn1 used:
version:4.19.0.39-99e3

## Distributor of libtasn1 (e.g., Ubuntu, Fedora, RHEL)
env: ubuntu20.04

## How reproducible:

Steps to Reproduce:

 * one ：use afl-gcc compile libasan1 with AFL_USE_ASAN=1
 * tow ：asn1Coding poc /path/to/libasan1/example/asn1Coding_test.asg --output=/dev/null

## Actual results:
==1837==ERROR: AddressSanitizer: allocator is out of memory trying to allocate 0x98 bytes
    #0 0x7f0e170b9a06 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153
    #1 0x5586fcfb1867 in _asn1_add_single_node /home/compiler/libtasn1-asan/lib/structure.c:52
    #2 0x5586fcfb1867 in _asn1_copy_structure3 /home/compiler/libtasn1-asan/lib/structure.c:458
==1837==HINT: if you don't care about these errors you may set allocator_may_return_null=1
SUMMARY: AddressSanitizer: out-of-memory ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153 in __interceptor_calloc
==1837==ABORTING

## Expected results:

## poc：
[poc.zip_c9b49f41-24d6-42ac-9e5c-c016928bfed1.zip](/uploads/304efcdb1442e2575708592bc0000163/poc.zip_c9b49f41-24d6-42ac-9e5c-c016928bfed1.zip)

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/libtasn1/-/issues/53
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20250120/6a5499db/attachment-0001.html>