giantbranch

Heap use after free in dwg_encode_add_object in src/encode.c:3877

1

## Affected version the latest commit: https://github.com/LibreDWG/libredwg/tree/45d2a290c65ed691be0901ba2b2ef51044e07a16 and 0.12.4 ## What's the problem? A heap use after free was discovered in dwg_encode_add_object in src/encode.c:3877. ASAN report: ``` $ ./dwgrewrite ./pocs/tests_64231...

Null pointer dereference in function remove_NOD_item in encode.c:1361

1

## Affected version the latest commit: https://github.com/LibreDWG/libredwg/tree/45d2a290c65ed691be0901ba2b2ef51044e07a16 and 0.12.4 ## What's the problem? A null pointer deference was discovered in remove_NOD_item in src/encode.c:1361. ASAN report: ``` $ ./dwgrewrite ./pocs/tests_64230 .........

READ unknown address in dwg_encode_add_object in encode.c:3877

1

## Affected version the latest commit: https://github.com/LibreDWG/libredwg/tree/45d2a290c65ed691be0901ba2b2ef51044e07a16 and 0.12.4 ## What's the problem? Segmentation fault in dwg_encode_add_object in encode.c:3877 because of reading unknown address. ASAN report: ``` $ ./dwgrewrite ./pocs/tests_64229...

## Affected version the latest commit: https://github.com/LibreDWG/libredwg/tree/45d2a290c65ed691be0901ba2b2ef51044e07a16 and 0.12.4 ## What's the problem? A heap use after free was discovered in bit_copy_chain in src/bits.c:3318. ASAN report: ``` $ ./dwgrewrite ./pocs/tests_64233...

## Affected version the latest commit: https://github.com/LibreDWG/libredwg/tree/45d2a290c65ed691be0901ba2b2ef51044e07a16 and 0.12.4 ## What's the problem? Segmentation fault in bit_write_RC in bits.c:351 because of writing unknown address. ASAN report: ``` $ ./dwgrewrite ./pocs/tests_64234...

Environment - android-ndk-r21e - capstone-4.0.2 - skia 11-release error message ``` /root/SkCodecFuzzer/android-ndk-r21e/toolchains/llvm/prebuilt/linux-x86_64/bin/aarch64-linux-android29-clang++ -o loader loader.o common.o tokenizer.o libdislocator.o -L/root/SkCodecFuzzer/deps/capstone-5.0-rc2 -lcapstone -L/root/SkCodecFuzzer/system/lib64 -lhwui -ldl -lbacktrace -landroidicu -lstatspull -Wl,-rpath -Wl,/root/SkCodecFuzzer/system/lib64 -Wl,--dynamic-linker=/root/SkCodecFuzzer/system/bin/linker64 /root/SkCodecFuzzer/system/lib64/libhwui.so:...