Skip to content

ipfw: fix integer overflow in dummynet#14

Open
petrvaganoff wants to merge 1 commit intoluigirizzo:masterfrom
petrvaganoff:overflow-dummynet
Open

ipfw: fix integer overflow in dummynet#14
petrvaganoff wants to merge 1 commit intoluigirizzo:masterfrom
petrvaganoff:overflow-dummynet

Conversation

@petrvaganoff
Copy link

Found during fuzzing using AFL++:

"strtoul()" returns a large positive number or a negative number.
Next, the sanitizer detects an integer overflow in
line 555 ("bw*= 1000") or in line 558 ("bw*= 1000000") or
in line 563 ("bw*= 8"), and the program crashes with
the error "SIGILL: illegal instruction operand".

    Found during fuzzing using AFL++:

    "strtoul()" returns a large positive number or a negative number.
    Next, the sanitizer detects an integer overflow in
    line 555 ("bw*= 1000") or in line 558 ("bw*= 1000000") or
    in line 563 ("bw*= 8"), and the program crashes with
    the error "SIGILL: illegal instruction operand".
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant