https://bugs.exim.org/show_bug.cgi?id=2082

            Bug ID: 2082
           Summary: left shift in pcre2_jit_compile.c:8369
           Product: PCRE
           Version: 10.23 (PCRE2)
          Hardware: x86-64
                OS: Linux
            Status: NEW
          Severity: security
          Priority: medium
         Component: Code
          Assignee: p...@hermes.cam.ac.uk
          Reporter: a...@gentoo.org
                CC: pcre-dev@exim.org

Hello,

I found a left shift through fuzzing.
It was tested on version 10.23, compiled with clang-3.9.1

Output:
pcre2-10.23/src/pcre2_jit_compile.c:8369:96: runtime error: left shift of
negative value -1

Command to reproduce:
# pcretest -d -i -8 $FILE

Reproducer:
https://github.com/asarubbo/poc/blob/master/00222-pcre2-leftshift-pcre2_jit_compile

( I know that is preferable attach reproducer here, but this link won't expire
in the future )
If someone think that it will expire, feel free to download it and reattach it
here.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
-- 
## List details at https://lists.exim.org/mailman/listinfo/pcre-dev 

Reply via email to