389-ds-base

#48387 ASAN invalid read in cos_cache.c
Closed: wontfix Opened by firstyear.

Closed: wontfix
Reopen Issue

==7050== ERROR: AddressSanitizer: global-buffer-overflow on address 0x7f643b32c5ff at pc 0x7f643b3217aa bp 0x7f64331c5f60 sp 0x7f64331c5f50
READ of size 1 at 0x7f643b32c5ff thread T5
#0 0x7f643b3217a9 in cos_cache_backwards_stricmp_and_clip /home/wibrown/development/389ds/ds/ldap/servers/plugins/cos/cos_cache.c:3428

Issue exists in the length check, which allows the value to go to -1 causing the invalid read.

A good catch!

commit a3a11f9c22898c09ca26c4c0e9d6ef6c50e6fde4
To ssh://git.fedorahosted.org/git/389/ds.git
f5b9053..d7c71db master -> master

Thanks!

Metadata Update from @firstyear:
- Issue assigned to firstyear
- Issue set to the milestone: 1.3.5.0

389-ds-base is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in 389-ds-base's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/389ds/389-ds-base/issues/1718

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Metadata Update from @spichugi:
- Issue close_status updated to: wontfix (was: Fixed)
Metadata
None
None
None
High
ack
QE
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.