search

ianh / owl

A parser generator for visibly pushdown languages.
MIT License
746 stars 21 forks source link

Out-of-bounds Read Vulnerability #33

Closed circeanubogdan closed 1 year ago

circeanubogdan commented 1 year ago

Hello,

I am currentlry working on OpenCRS, and I used your app for testing the Vulnerability Detection module.

While doing so, I discovered an out-of-bounds read that could prove itself as a vulnerability.

Steps to reproduce

  1. Compile using the base Makefile.
  2. Run with valgrind to see the error report for the invalid read: valgrind ./owl -T -g -.

Patches

I already forked the repository and proposed a patch in the Pull Request #32

ianh commented 1 year ago

Fixed in 93a6b7c -- thanks for the report.