https://bugs.exim.org/show_bug.cgi?id=2081
Bug ID: 2081
Summary: left shift in pcre2_jit_compile.c:3886
Product: PCRE
Version: 10.23 (PCRE2)
Hardware: x86-64
OS: Linux
Status: NEW
Severity: security
Priority: medium
Component: Code
Assignee: p...@hermes.cam.ac.uk
Reporter: a...@gentoo.org
CC: pcre-dev@exim.org
Hello,
I found a left shift through fuzzing.
It was tested on version 10.23, compiled with clang-3.9.1
Output:
libpcre2-10.22/work/pcre2-10.22/src/pcre2_jit_compile.c:3886:15: runtime error:
left shift of 251 by 24 places cannot be represented in type 'sljit_s32' (aka
'int')
Command to reproduce:
# pcretest -d -i -8 $FILE
Reproducer:
https://github.com/asarubbo/poc/blob/master/00221-pcre2-leftshift-pcre2_jit_compile
( I know that is preferable attach reproducer here, but this link won't expire
in the future )
If someone think that it will expire, feel free to download it and reattach it
here.
--
You are receiving this mail because:
You are on the CC list for the bug.
--
## List details at https://lists.exim.org/mailman/listinfo/pcre-dev
