Skip to content

Stack Overflow in Scanner::EnsureTokensInQueue()  #655

@E4ck

Description

@E4ck

Stack Overflow in Scanner::EnsureTokensInQueue()

position:code

poc

To reproduce: ./parse < crash2.txt

gdb:
Program received signal SIGSEGV, Segmentation fault.
0x0807598e in YAML::Scanner::EnsureTokensInQueue() ()

ASAN:
ASAN:DEADLYSIGNAL
================================================================= ==2258==ERROR: AddressSanitizer: stack-overflow on address 0xbf338fa0 (pc 0x0814e423 bp 0xbf3393c8 sp 0xbf338f90 T0)
#0 0x814e422 (/home/user/yaml-cpp/build/util/parse+0x814e422)
#1 0x816fd48 (/home/user/yaml-cpp/build/util/parse+0x816fd48)
#2 0x8190a72 (/home/user/yaml-cpp/build/util/parse+0x8190a72)
#3 0x81d5061 (/home/user/yaml-cpp/build/util/parse+0x81d5061)
#4 0x81deb85 (/home/user/yaml-cpp/build/util/parse+0x81deb85)
#5 0x81d511a (/home/user/yaml-cpp/build/util/parse+0x81d511a)
#6 0x81deb85 (/home/user/yaml-cpp/build/util/parse+0x81deb85)
#7 0x81d511a (/home/user/yaml-cpp/build/util/parse+0x81d511a)
#8 0x81deb85 (/home/user/yaml-cpp/build/util/parse+0x81deb85)
#9 0x81d511a (/home/user/yaml-cpp/build/util/parse+0x81d511a)
#10 0x81deb85 (/home/user/yaml-cpp/build/util/parse+0x81deb85)
#11 0x81d511a (/home/user/yaml-cpp/build/util/parse+0x81d511a)
......
#245 0x81d511a (/home/eack/yaml-cpp/build/util/parse+0x81d511a)
#246 0x81deb85 (/home/eack/yaml-cpp/build/util/parse+0x81deb85)
#247 0x81d511a (/home/eack/yaml-cpp/build/util/parse+0x81d511a)
#248 0x81deb85 (/home/eack/yaml-cpp/build/util/parse+0x81deb85)
#249 0x81d511a (/home/eack/yaml-cpp/build/util/parse+0x81d511a)
#250 0x81deb85 (/home/eack/yaml-cpp/build/util/parse+0x81deb85)
SUMMARY: AddressSanitizer: stack-overflow (/home/eack/yaml-cpp/build/util/parse+0x814e422) ==2258==ABORTING

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions