https://bugs.winehq.org/show_bug.cgi?id=54770
Bug ID: 54770 Summary: missing check of malloc in loader/main.c Product: Wine Version: unspecified Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: loader Assignee: wine-bugs@winehq.org Reporter: void0red@gmail.com Distribution: ---
we put a fault injection fuzzing on wine, and find two potential bugs in loader/main.c. it may miss a malloc check before memcpy
the call stack looks like this:
main -> load_ntdll -> get_self_exe -> build_path -> memcpy
main -> load_ntdll -> remove_tail -> memcpy
https://bugs.winehq.org/show_bug.cgi?id=54770
Alexandre Julliard julliard@winehq.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |WONTFIX Status|UNCONFIRMED |RESOLVED
--- Comment #1 from Alexandre Julliard julliard@winehq.org --- If malloc fails on startup then nothing will work, there's no need to add checks for this.
https://bugs.winehq.org/show_bug.cgi?id=54770
Gijs Vermeulen gijsvrm@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |CLOSED
--- Comment #2 from Gijs Vermeulen gijsvrm@gmail.com --- Closing.