cxlzff

Results 21 issues of cxlzff

heap-use-after-free exists in the function swf_FontExtract_DefineTextCallback in swftext.c

1 comment

### system info Ubuntu x86_64, clang 6.0, swfdump (latest master a9d5082) ### Command line ./src/swfdump -D @@ ### AddressSanitizer output ==25679==ERROR: AddressSanitizer: heap-use-after-free on address 0x60600000d6a0 at pc 0x00000044059d bp...

memory leaks in swftools when we use swfdump

### system info Ubuntu x86_64, clang 6.0, swfdump (latest master a9d5082) ### Command line ./src/swfdump -D @@ ### AddressSanitizer output ==43305==ERROR: LeakSanitizer: detected memory leaks Indirect leak of 63245 byte(s)...

heap-buffer-overflow exists in the function swf_GetD64 in rfxswf.c

### system info Ubuntu x86_64, clang 6.0, swfdump (latest master a9d5082) ### Command line ./src/swfdump -D @@ ### AddressSanitizer output ==8687==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x60b00000aff8 at pc 0x000000473b4e bp...

heap-buffer-overflow exists in the function handleEditText in swfdump.c

### system info Ubuntu x86_64, clang 6.0, swfdump (latest master a9d5082) ### Command line ./src/swfdump -D @@ ### AddressSanitizer output ==44192==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x60600000e8d3 at pc 0x000000410aca bp...

heap-buffer-overflow exists in the function swf_FontExtract_DefineTextCallback in swftext.c

### system info Ubuntu x86_64, clang 6.0, swfdump (latest master a9d5082) ### Command line ./src/swfdump -D @@ ### AddressSanitizer output ==29246==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x61600000ffa0 at pc 0x00000044059d bp...

A NULL pointer dereference exists in the function traits_parse in abc.c

### system info Ubuntu x86_64, clang 6.0, swfdump (latest master a9d5082) ### Command line ./src/swfdump -D @@ ### AddressSanitizer output ==47344==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000030 (pc 0x000000488d17 bp...

A NULL pointer dereference exists in the function swf_DeleteFilter in swffilter.c

### system info Ubuntu x86_64, clang 6.0, swfdump (latest master a9d5082) ### Command line ./src/swfdump -D @@ ### AddressSanitizer output ==5769==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x00000042ba78 bp...

A NULL pointer dereference exists in the function main in swfdump.c

### system info Ubuntu x86_64, clang 6.0, swfdump (latest master a9d5082) ### Command line ./src/swfdump -D @@ ### AddressSanitizer output ==1975==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x000000406f68 bp...

heap-buffer-overflow exists in the function swf_GetBits in rfxswf.c

### system info Ubuntu x86_64, clang 6.0, swfdump (latest master a9d5082) ### Command line ./src/swfdump -D @@ ### AddressSanitizer output ==28613==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x60300000efdf at pc 0x00000047238d bp...

A NULL pointer dereference exists in the function swf_GetBits in rfxswf.c

### system info Ubuntu x86_64, clang 6.0, swfdump (latest master a9d5082) ### Command line ./src/swfdump -D @@ ### AddressSanitizer output ==41593==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x000000471fac bp...