A crafted input leads to crash (an invalid memory address dereference) at strlen-avx2.S:65 in opencolladavalidator v1.6.68 (the latest version, checked on Ubuntu/Debian packages and current master).
Seems the line accessorParameter.type = attributeData.type; in COLLADASaxFWL::SourceArrayLoader::begin__param (COLLADASaxFWLSourceArrayLoader.cpp:236) causes the segmentation fault.
A crafted input leads to crash (an invalid memory address dereference) at
strlen-avx2.S:65
in opencolladavalidatorv1.6.68
(the latest version, checked on Ubuntu/Debian packages and current master). Seems the lineaccessorParameter.type = attributeData.type;
in COLLADASaxFWL::SourceArrayLoader::begin__param (COLLADASaxFWLSourceArrayLoader.cpp:236) causes the segmentation fault.PoC: PoC.zip
Triggered by:
./OpenCOLLADAValidator PoC.dae
ASAN report:
GDB info:
Environment: Host Operating System and version: Ubuntu 20.04.2 LTS Host CPU architecture: x86_64