[Bug 54770] New: missing check of malloc in loader/main.c

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=54770

            Bug ID: 54770
           Summary: missing check of malloc in loader/main.c
           Product: Wine
           Version: unspecified
          Hardware: x86-64
                OS: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: loader
          Assignee: wine-bugs(a)winehq.org
          Reporter: void0red(a)gmail.com
      Distribution: ---

we put a fault injection fuzzing on wine,
and find two potential bugs in loader/main.c.
it may miss a malloc check before memcpy

the call stack looks like this:

main ->
        load_ntdll ->
                get_self_exe ->
                        build_path ->
                                memcpy

main ->
        load_ntdll ->
                remove_tail ->
                        memcpy

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.

[Bug 54770] missing check of malloc in loader/main.c

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=54770

Alexandre Julliard <julliard(a)winehq.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |WONTFIX
             Status|UNCONFIRMED                 |RESOLVED

--- Comment #1 from Alexandre Julliard <julliard(a)winehq.org> ---
If malloc fails on startup then nothing will work, there's no need to add
checks for this.

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.

[Bug 54770] missing check of malloc in loader/main.c

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=54770

Gijs Vermeulen <gijsvrm(a)gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #2 from Gijs Vermeulen <gijsvrm(a)gmail.com> ---
Closing.

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.