Skip to content

Stack Overflow in HandleNode() #459

@fumfel

Description

@fumfel

Stack Overflow in HandleNode()

Git HEAD: 86c69bb

Payload

To reproduce: cat yaml_stack_overflow | parse

ASAN:

==23331==ERROR: AddressSanitizer: stack-overflow on address 0x7ffec5d6bfc8 (pc 0x0000004bc0ba bp 0x7ffec5d6c830 sp 0x7ffec5d6bfd0 T0)
    #0 0x4bc0b9 in __asan_memcpy /home/development/llvm/3.9.0/final/llvm.src/projects/compiler-rt/lib/asan/asan_interceptors.cc:413:3
    #1 0x51c2ba in YAML::SingleDocParser::HandleNode(YAML::EventHandler&) XYZ/yaml-cpp/src/singledocparser.cpp:56:15
    #2 0x520e7d in YAML::SingleDocParser::HandleFlowSequence(YAML::EventHandler&) XYZ/yaml-cpp/src/singledocparser.cpp:199:5
    #3 0x51d688 in YAML::SingleDocParser::HandleSequence(YAML::EventHandler&) XYZ/yaml-cpp/src/singledocparser.cpp:143:7
    #4 0x51d688 in YAML::SingleDocParser::HandleNode(YAML::EventHandler&) XYZ/yaml-cpp/src/singledocparser.cpp:98
    #5 0x525da0 in YAML::SingleDocParser::HandleCompactMap(YAML::EventHandler&) XYZ/yaml-cpp/src/singledocparser.cpp:330:3
    #6 0x51d8b7 in YAML::SingleDocParser::HandleMap(YAML::EventHandler&) XYZ/yaml-cpp/src/singledocparser.cpp:226:7
    #7 0x51d8b7 in YAML::SingleDocParser::HandleNode(YAML::EventHandler&) XYZ/yaml-cpp/src/singledocparser.cpp:121
    ===================================================== SNIP! =====================================================
    #369 0x51d688 in YAML::SingleDocParser::HandleSequence(YAML::EventHandler&) XYZ/yaml-cpp/src/singledocparser.cpp:143:7
    #370 0x51d688 in YAML::SingleDocParser::HandleNode(YAML::EventHandler&) XYZ/yaml-cpp/src/singledocparser.cpp:98
    #371 0x525da0 in YAML::SingleDocParser::HandleCompactMap(YAML::EventHandler&) XYZ/yaml-cpp/src/singledocparser.cpp:330:3
    #372 0x51d8b7 in YAML::SingleDocParser::HandleMap(YAML::EventHandler&) XYZ/yaml-cpp/src/singledocparser.cpp:226:7
    #373 0x51d8b7 in YAML::SingleDocParser::HandleNode(YAML::EventHandler&) XYZ/yaml-cpp/src/singledocparser.cpp:121
    #374 0x520e7d in YAML::SingleDocParser::HandleFlowSequence(YAML::EventHandler&) XYZ/yaml-cpp/src/singledocparser.cpp:199:5
    #375 0x51d688 in YAML::SingleDocParser::HandleSequence(YAML::EventHandler&) XYZ/yaml-cpp/src/singledocparser.cpp:143:7
    #376 0x51d688 in YAML::SingleDocParser::HandleNode(YAML::EventHandler&) XYZ/yaml-cpp/src/singledocparser.cpp:98

SUMMARY: AddressSanitizer: stack-overflow /home/development/llvm/3.9.0/final/llvm.src/projects/compiler-rt/lib/asan/asan_interceptors.cc:413:3 in __asan_memcpy
==23331==ABORTING

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions