mirror of
https://github.com/CCExtractor/ccextractor.git
synced 2026-02-16 21:23:35 +00:00
[BUG]Heap buffer overflow when parsing TS format #698
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @Me19m4 on GitHub (Mar 23, 2022).
CCExtractor version:
Version: 0.94
I have read and understood the contributors guide.
I have checked that the bug-fix I am reporting can be replicated, or that the feature I am suggesting isn't already present.
I have checked that the issue I'm posting isn't already reported.
I have checked that the issue I'm porting isn't already solved and no duplicates exist in closed issues and in opened issues
I have checked the pull requests tab for existing solutions/implementations to my issue/suggestion.
I have used the latest available version of CCExtractor to verify this issue exists.
I have ticked all the boxes in this section and to prove it I'm deleting the section completely to remove boilerplate text.
What were the used arguments? `{replace with the arguments}
./ccextractor example.tsWhat platform did you use? {Window/Linux/Mac}
Ubuntu21.10Additional information
example.ts link :
https://drive.google.com/file/d/11hV7Uf_lA3vlFr-EWZdOJ3Q9eQCKGIY_/view?usp=sharing
@Unknownsentinel193 commented on GitHub (Mar 31, 2023):
Hi, Can I work on this problem?, I am a security enthusiast with some knowledge of buffer overflows. According to the given AddressSanitizer tool log, the error occurred in function "parse_PMT", which is located in file ts tables.c. The same file's function "ts_buffer_psi_packet" used the "malloc" function to allocate a region of 184 bytes, and the error occurred 48 bytes beyond the end of this allocated region. I'd appreciate some additional guidance on this as this is my first time working with C/C++.I am comfortable with Python.
@cfsmp3 commented on GitHub (Mar 31, 2023):
Go for it, but after a preliminary look it looked like we'd need to rewrite the whole function.
If this is your first contact with C you might want to tackle an easier bug.
@Unknownsentinel193 commented on GitHub (Mar 31, 2023):
Thank You for your response, it is my first time with C and after having a look at the function(big) It is very tough to solve, but I shall try
@cfsmp3 commented on GitHub (Mar 31, 2023):
Godspeed!
@NDFA-with-epsilon commented on GitHub (Apr 11, 2023):
Hi, Can I work on this issue ? I have a good amount of experience with C and Valgrind. I think I can apply that knowledge here and work on a fix.
@cfsmp3 commented on GitHub (Apr 12, 2023):
Sure 👍
@IshanGrover2004 commented on GitHub (Jan 23, 2024):
Hey @Me19m4 can you provide the working link of video
@Me19m4 commented on GitHub (Jan 23, 2024):
Sorry, test environment has been destroyed,It's been too long.
@Z-xus commented on GitHub (Dec 1, 2024):
I think this issue should be closed if not possible to replicate