[Octave-patch-tracker] [patch #10365] VM: Prevent out-of-bounds read

[Petter T.]

URL:
  <https://savannah.gnu.org/patch/?10365>

                 Summary: VM: Prevent out-of-bounds read
                   Group: GNU Octave
               Submitter: petter
               Submitted: Sun 25 Jun 2023 12:09:31 AM UTC
                Category: None
                Priority: 5 - Normal
                  Status: None
                 Privacy: Public
             Assigned to: None
        Originator Email: 
             Open/Closed: Open
         Discussion Lock: Any


    _______________________________________________________

Follow-up Comments:


-------------------------------------------------------
Date: Sun 25 Jun 2023 12:09:31 AM UTC By: Petter T. <petter>
"
Prefetching of 'arg0' for single byte opcodes leads to reading past the end
of the array that stores the opcodes.

* libinterp/parse-tree/pt-bytecode-walk.cc: Append dummy opcode
"

Running asan complained about a out of bounds read from the array containing
the bytecode, due to the VM reading the next byte after the first byte in an
opcode, into the variable arg0. This leads to an out-of-bounds read for the
last opcode if it is one byte long.








    _______________________________________________________
File Attachments:


-------------------------------------------------------
Date: Sun 25 Jun 2023 12:09:31 AM UTC  Name: octave_32273.patch  Size: 1KiB  
By: petter

<http://savannah.gnu.org/patch/download.php?file_id=54871>

    _______________________________________________________

Reply to this item at:

  <https://savannah.gnu.org/patch/?10365>

_______________________________________________
Message sent via Savannah
https://savannah.gnu.org/