viest / php-ext-xlswriter

🚀 PHP Extension for creating and reader XLSX files.
https://xlswriter.viest.me
BSD 2-Clause "Simplified" License
2.26k stars 232 forks source link

Validation string too long, caused buffer overflow detected #486

Open godhelpjun opened 1 year ago

godhelpjun commented 1 year ago

bt

0 __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:51

1 0x00007f3b2ecc27f1 in __GI_abort () at abort.c:79

2 0x00007f3b2ed0b837 in __libc_message (action=action@entry=(do_abort | do_backtrace), fmt=fmt@entry=0x7f3b2ee38869 " %s : %s terminated\n") at ../sysdeps/posix/libc_fatal.c:181

3 0x00007f3b2edb6b5f in __GI___fortify_fail_abort (need_backtrace=need_backtrace@entry=true, msg=msg@entry=0x7f3b2ee387e6 "buffer overflow detected") at fortify_fail.c:33

4 0x00007f3b2edb6b81 in __GI___fortify_fail (msg=msg@entry=0x7f3b2ee387e6 "buffer overflow detected") at fortify_fail.c:44

5 0x00007f3b2edb4870 in __GI___chk_fail () at chk_fail.c:28

6 0x00007f3b2edb3a93 in __strcat_chk (dest=dest@entry=0x564e2ce31880 "\"①实物退仓、做退单,②实物销毁、做空退单,③实物退供应商,做空退单,④实物退供应商,供应商补发同样货品或补发同等货值其他货品,⑤实物门店处"..., src=src@entry=0x7f3b268bcf08 "\"", destlen=, destlen@entry=258) at strcat_chk.c:34

7 0x00007f3b2688750c in strcat (src=0x7f3b268bcf08 "\"", dest=0x564e2ce31880 "\"①实物退仓、做退单,②实物销毁、做空退单,③实物退供应商,做空退单,④实物退供应商,供应商补发同样货品或补发同等货值其他货品,⑤实物门店处"...) at /usr/include/x86_64-linux-gnu/bits/string_fortified.h:128

8 _validation_list_to_csv (list=0x7f3b21d289c0) at /home/adam/soft/php-src/xlswriter/library/libxlsxwriter/src/worksheet.c:1418

9 0x00007f3b268910cd in worksheet_data_validation_range (self=0x564e2cd90d90, first_row=, first_col=, last_row=0, last_col=21, validation=0x7f3b21d02540) at /home/adam/soft/php-src/xlswriter/library/libxlsxwriter/src/worksheet.c:10051

10 0x00007f3b26852cb8 in zim_vtiful_xls_validation (execute_data=0x7f3b220195b0, return_value=0x7f3b25eebd40) at /home/adam/soft/php-src/xlswriter/kernel/excel.c:1399

11 0x0000564e2a37bcfc in ZEND_DO_FCALL_SPEC_RETVAL_UNUSED_HANDLER () at /home/adam/soft/php-src/Zend/zend_vm_execute.h:1761

12 execute_ex (ex=0x2) at /home/adam/soft/php-src/Zend/zend_vm_execute.h:55784

13 0x0000564e2a2fc201 in zend_call_function (fci=fci@entry=0x7f3b25eebeb0, fci_cache=fci_cache@entry=0x7f3b233e9030) at /home/adam/soft/php-src/Zend/zend_execute_API.c:908

14 0x00007f3b25f225c8 in swow_coroutine_function (z_data=0x0) at src/swow_coroutine.c:273

15 0x00007f3b25f44151 in cat_coroutine_context_function (transfer=...) at deps/libcat/src/cat_coroutine.c:420

16 0x00007f3b25f5ac2f in cat_coroutine_context_make () at deps/libcat/deps/context/asm/make_x86_64_sysv_elf_gas.S:135

17 0x00010102464c457f in ?? ()

18 0x0000000000000000 in ?? ()