Package: antiword
Version: 0.37-16
Severity: normal

Dear Maintainer,
running antiword with the attached file leads to an invalid read, causing a 
segfault.
I used the command line:
antiword ./01_segfault_bGet8DocumentText

this is the output of valgrind:
[...]
==770== Invalid read of size 1
==770==    at 0x10F233: bGet8DocumentText (findtext.c:259)
==770==    by 0x12775C: bGetDocumentText (wordole.c:503)
==770==    by 0x12775C: iInitDocumentOLE (wordole.c:786)
==770==    by 0x1242D5: bWordDecryptor (word2text.c:665)
==770==    by 0x10B6DE: bProcessFile (main_u.c:214)
==770==    by 0x10B6DE: main (main_u.c:310)
==770==  Address 0x534ba998 is not stack'd, malloc'd or (recently) free'd
==770== 
==770== 
==770== Process terminating with default action of signal 11 (SIGSEGV): dumping 
core
==770==  Access not within mapped region at address 0x534BA998
==770==    at 0x10F233: bGet8DocumentText (findtext.c:259)
==770==    by 0x12775C: bGetDocumentText (wordole.c:503)
==770==    by 0x12775C: iInitDocumentOLE (wordole.c:786)
==770==    by 0x1242D5: bWordDecryptor (word2text.c:665)
==770==    by 0x10B6DE: bProcessFile (main_u.c:214)
==770==    by 0x10B6DE: main (main_u.c:310)
[...]

--
Regards,
Luca Borzacchiello

-- System Information:
Debian Release: 10.5
  APT prefers testing
  APT policy: (500, 'testing'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 5.4.0-42-generic (SMP w/12 CPU cores)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, 
TAINT_UNSIGNED_MODULE
Locale: LANG=C, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE=C (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: unable to detect

Versions of packages antiword depends on:
ii  libc6  2.28-10

antiword recommends no packages.

antiword suggests no packages.

-- no debconf information

Attachment: 01_segfault_bGet8DocumentText
Description: MS-Word document

Reply via email to