bug#64229: b2sum: heap-overflow in digest_check

2023-06-22 Thread Pádraig Brady
On 22/06/2023 17:33, Frank Busse wrote: Hi, KLEE reported a heap-overflow in b2sum (Coreutils 9.3). When running it with: $ printf '\n\n0A0BA0' | coreutils-9.3/bin/b2sum -c (even '0BA0' seems to work on my machine) ASAN confirms the issue: #1 0x00473de0 in __interceptor_strchr (s=,

bug#64229: b2sum: heap-overflow in digest_check

2023-06-22 Thread Frank Busse
Hi, KLEE reported a heap-overflow in b2sum (Coreutils 9.3). When running it with: $ printf '\n\n0A0BA0' | coreutils-9.3/bin/b2sum -c (even '0BA0' seems to work on my machine) ASAN confirms the issue: > #1 0x00473de0 in __interceptor_strchr (s=, > c=) > #2 0x00500a81 in diges