0000000-0.01\r\n\r\n'
% sessionId
s.send(payload)
time.sleep(0.1)
print(s.recv(0x1))
while True:
pass
```
Best Regards,
Xiaobo Xiang
Package: libpodofo
Version: 0.9.5
[summary]
I've found a heap based buffer overflow in libpodofo using libFuzzer.
PdfXRefStreamParserObject::ReadXRefStreamEntry(src/base/PdfXRefStreamParserObject.cpp:224)
[details]
in function PdfXRefStreamParserObject::ReadXRefTable(), the program get
nW[] array
Hi,
I've found a heap overflow bug in podofo library during my fuzzing with
libFuzzer.
My wrapper just simply called
PdfMemDocument doc( filename );
It crashed when parsing a crafted pdf file.
the crash log is as follows:
==17463==ERROR: AddressSanitizer: heap-buffer-overflow on address
0x620