Cisco-Talos / clamav

ClamAV - Documentation is here: https://docs.clamav.net
https://www.clamav.net/
GNU General Public License v2.0
4.28k stars 692 forks source link

Stop parsing yara files when a syntax error s found. #1188

Closed ragusaa closed 6 months ago

ragusaa commented 7 months ago

The yara parser can potentially overwrite heap buffers parsing invalid yara files. Exit on error to avoid this. These overwrites are only observed when running with address sanitization and mpool disabled.

ragusaa commented 7 months ago

I am not sure if this is a viable solution, but it does prevent the ossfuzz errors. This will require more testing.