https://bz.apache.org/bugzilla/show_bug.cgi?id=66693
Bug ID: 66693
Summary: AddressSanitizer: SEGV
(/lib/x86_64-linux-gnu/libdb-5.3.so+0x4e81e) in
__ham_lookup
Product: Apache httpd-2
Version: 2.4.54
Hardware: PC
OS: Linux
Status: NEW
Severity: normal
Priority: P2
Component: mod_authn_dbm
Assignee: [email protected]
Reporter: [email protected]
Target Milestone: ---
Created attachment 38607
--> https://bz.apache.org/bugzilla/attachment.cgi?id=38607&action=edit
crash seed
Hello htdbm developers,
We recently conducted a fuzzing test on htdbm and discovered a SEGV bug. We
would like to provide a detailed description of the bug and seek your
assistance in addressing it.
version:
htdbm: 2.4.54
gcc:gcc version 9.4.0 (Ubuntu 9.4.0-1ubuntu1~20.04.1)
ubuntu: 20.04
command to reproduce:
htdbm -b SEGV_3 isap Pwd4Steve
SEGV_3 is attached to this report.
ASAN report:
=================================================================
==2665271==ERROR: AddressSanitizer: SEGV on unknown address 0x621000010d35 (pc
0x7f9064b9f81e bp 0x7ffc9422b450 sp 0x7ffc9422b220 T0)
==2665271==The signal is caused by a READ memory access.
#0 0x7f9064b9f81e in __ham_lookup
(/lib/x86_64-linux-gnu/libdb-5.3.so+0x4e81e)
#1 0x7f9064b9f91a (/lib/x86_64-linux-gnu/libdb-5.3.so+0x4e91a)
#2 0x7f9064c36f89 in __dbc_iget
(/lib/x86_64-linux-gnu/libdb-5.3.so+0xe5f89)
#3 0x7f9064c43451 in __db_get (/lib/x86_64-linux-gnu/libdb-5.3.so+0xf2451)
#4 0x7f9064c46f03 in __db_get_pp
(/lib/x86_64-linux-gnu/libdb-5.3.so+0xf5f03)
#5 0x7f906589725d
(/usr/lib/x86_64-linux-gnu/apr-util-1/apr_dbm_db-1.so+0x125d)
#6 0x4d05b9 in htdbm_save
/home/root/sp/Dataset/Httpd/httpd_aflpp/support/htdbm.c:164:9
#7 0x4cd974 in main
/home/root/sp/Dataset/Httpd/httpd_aflpp/support/htdbm.c:453:19
#8 0x7f9066597082 in __libc_start_main
/build/glibc-SzIz7B/glibc-2.31/csu/../csu/libc-start.c:308:16
#9 0x41d58d in _start
(/home/root/sp/Fuzz/aflpp_fuzz/Httpd/document_group/mb/htdbm_4/htdbm+0x41d58d)
AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: SEGV (/lib/x86_64-linux-gnu/libdb-5.3.so+0x4e81e) in
__ham_lookup
==2665271==ABORTING
Thank you for your attention and support.
Best regards,
Michael Zhang.
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
