oss-sec mailing list archives
imageworsener: two left shift
From: "Agostino Sarubbo" <ago () gentoo org>
Date: Sun, 30 Apr 2017 09:11:39 +0000
Description: imageworsener is a utility for image scaling and processing. There are two left shift visible with UbSan enabled. # imagew $FILE /tmp/out -outfmt bmp src/imagew-util.c:415:68: runtime error: left shift of 255 by 24 places cannot be represented in type 'int' src/imagew-bmp.c:427:10: runtime error: left shift of 1 by 31 places cannot be represented in type 'int' Affected version: 1.3.0 Fixed version: 1.3.1 Commit fix: https://github.com/jsummers/imageworsener/commit/a00183107d4b84bc8a714290e824ca9c68dac738 Credit: This bug was discovered by Agostino Sarubbo of Gentoo. CVE: CVE-2017-8326 Reproducer: https://github.com/asarubbo/poc/blob/master/00271-imageworsener-leftshift Timeline: 2017-04-13: bug discovered and reported to upstream 2017-04-22: upstream released a patch 2017-04-27: blog post about the issue 2017-04-29: CVE assigned Note: This bug was found with American Fuzzy Lop. Permalink: https://blogs.gentoo.org/ago/2017/04/27/imageworsener-two-left-shift/ -- Agostino Sarubbo Gentoo Linux Developer
Current thread:
- imageworsener: two left shift Agostino Sarubbo (Apr 30)