Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

gpp: Segmentation fault #26

Closed
tr3ee opened this issue Sep 14, 2018 · 4 comments
Closed

gpp: Segmentation fault #26

tr3ee opened this issue Sep 14, 2018 · 4 comments

Comments

@tr3ee
Copy link

tr3ee commented Sep 14, 2018

When using the file below, GPP will try to use more memory space than is available on the stack.

poc_gpp.txt

This can lead to denial of service attacks, even remote code execution in specific situations

@tr3ee
Copy link
Author

tr3ee commented Sep 17, 2018

CVE-2018-17076 has been assigned to this.

@kmpatel
Copy link

kmpatel commented Feb 7, 2019

I'm looking at the 'poc_gpp.txt' file, and see a binary. Am I seeing it incorrectly, or is the issue the importance of screening for binary files?

@logological
Copy link
Owner

@tr3ee: Thank you for the report. As you may have seen, the issue has been fixed and a new release issued.

@ShangzhiXu
Copy link

FYI, to reproduce the bug, the command is some thing like
./src/gpp poc_gpp.txt

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants