** Attachment added: "POC"
https://bugs.launchpad.net/ubuntu/+source/libmatio/+bug/1859263/+attachment/5319199/+files/poc_m017
** Description changed:
SEGV in matio-1.5.17/src/mat.c:1558 Mat_VarFree. Detial log as flollow:
(POC in attachment)
- lbb@lbb: ./matio-1.5.17/build/bin/matdump poc_m001
+ lbb@lbb: ./matio-1.5.17/build/bin/matdump poc_m017
InflateData: inflate returned data error
InflateData: inflate returned data error
+ ...
InflateSkip: inflate returned data error
InflateDataType: inflate returned data error
InflateData: inflate returned data error
InflateSkip: inflate returned data error
- Name: struct1
- Rank: 2
+ Name: struct1
+ Rank: 2
Class Type: Structure
Fields[2] {
- Name: a
- Rank: 2
+ Name: a
+ Rank: 2
Dimensions: 1 x 1
Class Type: Sparse Array (complex)
- Name: b
- Rank: 2
+ Name: b
+ Rank: 2
Dimensions: 1 x 1
Class Type: Sparse Array (complex)
}
ASAN:SIGSEGV
=================================================================
==15528==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc
0x7fe9950b01b2 bp 0x7ffebe07cd70 sp 0x7ffebe07cca0 T0)
- #0 0x7fe9950b01b1 in Mat_VarFree
/home/lbb/afl-experient/Tests/ASAN/matio-1.5.17/src/mat.c:1558:26
- #1 0x7fe9950b0690 in Mat_VarFree
/home/lbb/afl-experient/Tests/ASAN/matio-1.5.17/src/mat.c:1476:25
- #2 0x4dc4ea in main
/home/lbb/afl-experient/Tests/ASAN/matio-1.5.17/tools/matdump.c:944:17
- #3 0x7fe993eb382f in __libc_start_main
/build/glibc-LK5gWL/glibc-2.23/csu/../csu/libc-start.c:291
- #4 0x435b18 in _start
(/home/lbb/afl-experient/Tests/ASAN/matio-1.5.17/build/bin/matdump+0x435b18)
+ #0 0x7fe9950b01b1 in Mat_VarFree /matio-1.5.17/src/mat.c:1558:26
+ #1 0x7fe9950b0690 in Mat_VarFree /matio-1.5.17/src/mat.c:1476:25
+ #2 0x4dc4ea in main /matio-1.5.17/tools/matdump.c:944:17
+ #3 0x7fe993eb382f in __libc_start_main
/build/glibc-LK5gWL/glibc-2.23/csu/../csu/libc-start.c:291
+ #4 0x435b18 in _start (/matio-1.5.17/build/bin/matdump+0x435b18)
AddressSanitizer can not provide additional info.
- SUMMARY: AddressSanitizer: SEGV
/home/lbb/afl-experient/Tests/ASAN/matio-1.5.17/src/mat.c:1558 Mat_VarFree
+ SUMMARY: AddressSanitizer: SEGV /matio-1.5.17/src/mat.c:1558 Mat_VarFree
==15528==ABORTING
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1859263
Title:
SEGV in matio-1.5.17/src/mat.c:1558 Mat_VarFree
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libmatio/+bug/1859263/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
