| Titre | Tiff to PS conversion crashes due to incorrect memory size request in libtiff |
|---|
| Description | When converting A TIFF file to a PS file, a well-crafted TIFF can result in a mis-sized memory request. This can result in a local denial of service
OS：ubuntu 20.04
LIBTIFF, Version 4.3.0
Command: ./tiff2ps -2 -a Poc.tiff
POC Link : https://gitlab.com/libtiff/libtiff/uploads/c3da94e53cf1e1e8e6d4d3780dc8c42f/example.tiff
ASAN Report:
==1860246==ERROR: AddressSanitizer: allocator is out of memory trying to allocate 0x2000000000 bytes
#0 0x499d1d in __interceptor_malloc (/home/user/libtiff/tools/.libs/tiff2ps+0x499d1d)
#1 0x7ffff7a46193 in _init (/lib/x86_64-linux-gnu/libjbig.so.0+0x1193)
#2 (closed) 0x7ffff7db3407 (/home/user/libtiff/libtiff/.libs/libtiff.so.5+0x3407)
==1860246==HINT: if you don't care about these errors you may set allocator_may_return_null=1
SUMMARY: AddressSanitizer: out-of-memory (/home/user/libtiff/tools/.libs/tiff2ps+0x499d1d) in __interceptor_malloc
==1860246==ABORTING
See the link below for more information：
https://gitlab.com/libtiff/libtiff/-/issues/402
|
|---|
| La source | ⚠️ https://gitlab.com/libtiff/libtiff/-/issues/402 |
|---|
| Utilisateur | patchkey (UID 25647) |
|---|
| Soumission | 03/04/2022 08:48 (il y a 4 ans) |
|---|
| Modérer | 03/04/2022 09:00 (12 minutes later) |
|---|
| Statut | Accepté |
|---|
| Entrée VulDB | 196363 [LibTIFF 4.3.0 tiff2ps déni de service] |
|---|
| Points | 20 |
|---|