http://bugs.winehq.org/show_bug.cgi?id=60312 Bug ID: 60312 Summary: heap-buffer-overflow in winedevice.exe when running hid:device (ASan). Product: Wine Version: 11.17 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs@list.winehq.org Reporter: bernhardu@mailbox.org Target Milestone: --- Distribution: --- Created attachment 82067 --> http://bugs.winehq.org/attachment.cgi?id=82067 demonstration patch Hello, I gained the ability to fully run also background processes with ASan fully enabled, I receive a report when running the hid:device test. This is the latest run in gitlab CI: https://gitlab.winehq.org/bernhardu/wine/-/jobs/302801#L4609 It seems it got a buffer with two bytes reserved, uses one byte, and then tries to put another two bytes from some "last_reports" into the buffer. Attached patch adds a check and returns buffer-too-small, and increases the buffer the tests sends to "kernel" side. Hopefully that can demonstrate the issue. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.