Uploaded image for project: 'Xerces-C++'
  1. Xerces-C++
  2. XERCESC-2217

ICUTranscoder::transcodeFrom buffer overflow

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 3.2.3
    • 3.2.4, 4.0.0
    • None
    • None

    Description

      See https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35373

      When charsDecoded == 0, the line for (index = 0; index < charsDecoded - 1; index++) will cause to read out of bounds of fSrcOffsets, due to unsigned integer underflow rules.

      Attachments

        Activity

          People

            rleigh Roger Leigh
            rleigh Roger Leigh
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: