Open burritoaddict opened 5 years ago
There's an integer truncation here when we assign the product of an unsigned long to a u32:
https://github.com/draios/sysdig/blob/123ba4d1a3bb5534ec8b92bbb10a356ff9652a5d/driver/ppm_events.c#L1109
j can now advance past what we copied from userspace leading to an out of bounds read: https://github.com/draios/sysdig/blob/123ba4d1a3bb5534ec8b92bbb10a356ff9652a5d/driver/ppm_events.c#L1127
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.
There's an integer truncation here when we assign the product of an unsigned long to a u32:
https://github.com/draios/sysdig/blob/123ba4d1a3bb5534ec8b92bbb10a356ff9652a5d/driver/ppm_events.c#L1109
j can now advance past what we copied from userspace leading to an out of bounds read: https://github.com/draios/sysdig/blob/123ba4d1a3bb5534ec8b92bbb10a356ff9652a5d/driver/ppm_events.c#L1127