Issue metadata
Sign in to add a comment
|
Security: Input-validation/String termination - Undefined behaviour, Crash, Buffer Overflow
Reported by
eternalg...@gmail.com,
Jun 7 2016
|
||||||||||||||||||
Issue descriptionVULNERABILITY DETAILS Source: https://chromium.googlesource.com/chromium/src/+/master/url/url_util_unittest.cc The sourcecode above contains multiple cases of non proper use of "strlen". It does nog handle strings that are not \0-terminated. This may cause undefined behavior of the program. If your string is not /0-terminated, the function will keep looking until it finds one. It may also return a lenght greater then expected, with a lot of unexpected values in it (in the worst cases it may even cause a buffer overflow). VERSION Chrome Version: stable Operating System: All REPRODUCTION CASE Insert values, that are not \0-terminated, the program will most likely crash or cause undefined behaviour.
,
Oct 1 2016
This bug has been closed for more than 14 weeks. Removing security view restrictions. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Oct 2 2016
This bug has been closed for more than 14 weeks. Removing security view restrictions. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Oct 2 2016
|
|||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||
Comment 1 by nparker@chromium.org
, Jun 8 2016Status: WontFix (was: Unconfirmed)