draios / sysdig

Linux system exploration and troubleshooting tool with first class support for containers
http://www.sysdig.com/
Other
7.68k stars 729 forks source link

Out of bounds memory read on 64 bit systems #1295

Open burritoaddict opened 5 years ago

burritoaddict commented 5 years ago

There's an integer truncation here when we assign the product of an unsigned long to a u32:

https://github.com/draios/sysdig/blob/123ba4d1a3bb5534ec8b92bbb10a356ff9652a5d/driver/ppm_events.c#L1109

j can now advance past what we copied from userspace leading to an out of bounds read: https://github.com/draios/sysdig/blob/123ba4d1a3bb5534ec8b92bbb10a356ff9652a5d/driver/ppm_events.c#L1127

github-actions[bot] commented 1 year ago

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.