screen-devel
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[screen-devel] [bug #57937] Heap Buffer overflow in MWrapChar


From: Hanno Boeck
Subject: [screen-devel] [bug #57937] Heap Buffer overflow in MWrapChar
Date: Mon, 2 Mar 2020 07:01:52 -0500 (EST)
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:73.0) Gecko/20100101 Firefox/73.0

URL:
  <https://savannah.gnu.org/bugs/?57937>

                 Summary: Heap Buffer overflow in MWrapChar
                 Project: GNU Screen
            Submitted by: hanno
            Submitted on: Mon 02 Mar 2020 01:01:51 PM CET
                Category: None
                Severity: 3 - Normal
                Priority: 5 - Normal
                  Status: None
                 Privacy: Public
             Assigned to: None
             Open/Closed: Open
                 Release: None
         Discussion Lock: Any
           Fixed Release: None
         Planned Release: None
           Work Required: None

    _______________________________________________________

Details:

With an ASAN-compiled screen I observed a heap overflow.

This seems to happen if there is some output of the screen and the window is
resized. I was able to reproduce this by doing a cat /dev/urandom within a
screen in a GUI terminal and then resizing the window for a while in random
movement.

ASAN detects a 1 byte heap overflow in MWrapChar, log attached.



    _______________________________________________________

File Attachments:


-------------------------------------------------------
Date: Mon 02 Mar 2020 01:01:51 PM CET  Name: screen-asan.txt  Size: 3KiB   By:
hanno
asan stack trace
<http://savannah.gnu.org/bugs/download.php?file_id=48531>

    _______________________________________________________

Reply to this item at:

  <https://savannah.gnu.org/bugs/?57937>

_______________________________________________
  Message sent via Savannah
  https://savannah.gnu.org/




reply via email to

[Prev in Thread] Current Thread [Next in Thread]