Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Buffer Overlap in zlib's inflate() Function Causes Memory Corruption #1032

Open
YancyLii opened this issue Jan 2, 2025 · 0 comments
Open

Comments

@YancyLii
Copy link

YancyLii commented Jan 2, 2025

Description:
A memory corruption bug was identified in zlib's inflate() function where it performs an unsafe memcpy operation with overlapping memory regions. The issue manifests when decompressing data using the inflate() function.

Steps to Reproduce:
Test_zlib_1.tar.gz

  1. Download the tar.gz file and decompress it, then (sudo) execute shell script
  2. ./Test_zlib1_1 crash-624fea9eee9a21570c3c4b963b92e8877c49fac7
  3. Observe the error message

Technical Details:
AddressSanitizer detected a memcpy-param-overlap error where the source and destination buffers overlap by 5 bytes. This indicates that inflate() is attempting to perform an in-place buffer copy without properly handling overlapping regions.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant