libyal / libpff

Library and tools to access the Personal Folder File (PFF) and the Offline Folder File (OFF) format
GNU Lesser General Public License v3.0
289 stars 74 forks source link

AddressSanitizer: heap-use-after-free at libpff_item_tree.c:841 #63

Closed hongxuchen closed 6 years ago

hongxuchen commented 6 years ago

POC file: https://github.com/ntu-sec/pocs/blob/master/libpff-4938b7a/crashes/huaf_libpff_item_tree.c%3A841_1.input.txt

ASan output: https://github.com/ntu-sec/pocs/blob/master/libpff-4938b7a/crashes/huaf_libpff_item_tree.c%3A841_1.err.SIG06

joachimmetz commented 6 years ago

This appears to be a duplicate of #61