From: Rich Felker <dalias@libc.org>
To: musl@lists.openwall.com
Subject: Re: Re: uninitialized memory access in memmem()
Date: Wed, 18 Jun 2014 23:56:20 -0400 [thread overview]
Message-ID: <20140619035620.GL179@brightrain.aerifal.cx> (raw)
In-Reply-To: <lntf8m$h7e$1@ger.gmane.org>
On Thu, Jun 19, 2014 at 01:43:50AM +0000, Clément Vasseur wrote:
> On 2014-06-19, Rich Felker <dalias@libc.org> wrote:
> > On Wed, Jun 18, 2014 at 06:20:33PM +0000, Clément Vasseur wrote:
> >> Hello,
> >>
> >> I found a case where memmem() returns 0 where it should not:
> >>
> >> $ cat test-memmem.c
> >> #define _GNU_SOURCE
> >> #include <string.h>
> >> #include <assert.h>
> >>
> >> #define DATA 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x10
> >>
> >> int main(void)
> >> {
> >> const unsigned char haystack[] = { DATA };
> >> const unsigned char needle[] = { DATA };
> >> assert(memmem(haystack, sizeof haystack, needle, sizeof needle));
> >> }
> >>
> >> $ musl-gcc test-memmem.c && ./a.out
> >> Assertion failed: memmem(haystack, sizeof haystack, needle, sizeof needle) (test-memmem.c: main: 11)
> >> Aborted
> >>
> >> Valgrind says a conditional jump or move depends on uninitalized value
> >> in twoway_memmem(). The code is quite complicated so I have not tried to
> >> track it down any further.
> >
> > Can you provide more details? musl version? gcc version? arch? I can't
> > reproduce this error in master with gcc 4.7.3/i386.
>
> I use master (7c73cac) with gcc 4.6.1/x86_64.
>
> I have another pattern which fails with gcc 4.8.3/arm. Looks like you
> might reproduce this one on your 32-bit arch:
>
> #define DATA 0x50, 0x17, 0x8a, 0xf3, 0x55, 0x67, 0x58, 0xdf
Are you sure you're actually using musl master? The file that matters
is /lib/ld-musl-$ARCH.so.1. If it's a symlink to an old musl you have
lying around somewhere, then that's the version you're really using. I
was able to reproduce this with musl 1.0.0 and it's simply the bug
fixed in commit 476cd1d96560aaf7f210319597556e7fbcd60469.
Rich
next prev parent reply other threads:[~2014-06-19 3:56 UTC|newest]
Thread overview: 6+ messages / expand[flat|nested] mbox.gz Atom feed top
2014-06-18 18:20 Clément Vasseur
2014-06-19 1:06 ` Rich Felker
2014-06-19 1:43 ` Clément Vasseur
2014-06-19 3:18 ` Rich Felker
2014-06-19 3:56 ` Rich Felker [this message]
2014-06-19 4:48 ` Rich Felker
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20140619035620.GL179@brightrain.aerifal.cx \
--to=dalias@libc.org \
--cc=musl@lists.openwall.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
Code repositories for project(s) associated with this public inbox
https://git.vuxu.org/mirror/musl/
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).