[Bug 60312] New: heap-buffer-overflow in winedevice.exe when running hid:device (ASan).

[WineHQ Bugzilla]

http://bugs.winehq.org/show_bug.cgi?id=60312

            Bug ID: 60312
           Summary: heap-buffer-overflow in winedevice.exe when running
                    hid:device (ASan).
           Product: Wine
           Version: 11.17
          Hardware: x86-64
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: -unknown
          Assignee: [e-mail]
          Reporter: [e-mail]
  Target Milestone: ---
      Distribution: ---

Created attachment 82067
  --> http://bugs.winehq.org/attachment.cgi?id=82067
demonstration patch

Hello, I gained the ability to fully run also background processes
with ASan fully enabled, I receive a report when running the hid:device test.

This is the latest run in gitlab CI:
  https://gitlab.winehq.org/bernhardu/wine/-/jobs/302801#L4609

It seems it got a buffer with two bytes reserved, uses one byte,
and then tries to put another two bytes from some "last_reports" into the
buffer.

Attached patch adds a check and returns buffer-too-small,
and increases the buffer the tests sends to "kernel" side.
Hopefully that can demonstrate the issue.

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.