SEGV in logrotate #271
Description
We found SEGV in logrotate binary and logrotate is complied with clang enabling ASAN.
Machine Setup
Machine : Ubuntu 16.04.3 LTS
gcc version 5.4.0 20160609 (Ubuntu 5.4.0-6ubuntu1~16.04.11)
Commit : 78c97a7
Command : logrotate -vdf $POC
ASAN Output
ASAN:DEADLYSIGNAL
=================================================================
==23234==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x0000004eed62 bp 0x7ffe1ae091d0 sp 0x7ffe1ae08c20 T0)
#0 0x4eed61 in freeTailLogs /home/fuzzer/victim/logrotate/config.c:552:23
#1 0x4eed61 in readConfigFile /home/fuzzer/victim/logrotate/config.c:1869
#2 0x4ec1a6 in readConfigPath /home/fuzzer/victim/logrotate/config.c:684:13
#3 0x4eb5b5 in readAllConfigPaths /home/fuzzer/victim/logrotate/config.c:758:13
#4 0x4fc9af in main /home/fuzzer/victim/logrotate/logrotate.c:2785:9
#5 0x7f03c438882f in __libc_start_main /build/glibc-LK5gWL/glibc-2.23/csu/../csu/libc-start.c:291
#6 0x419cd8 in _start (/home/fuzzer/victim/logrotate/logrotate+0x419cd8)
AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: SEGV /home/fuzzer/victim/logrotate/config.c:552:23 in freeTailLogs
==23234==ABORTING