Out of bounds memory read on 64 bit systems
Nobody has claimed this yet.
Assessment
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Newbie friendliness
- 55/100
- Issue type
- Bug
- Clarity
- Clearly specified
- Activity status
- Stale
- Domain
- operating-systems, security
Research direction
Inspect driver/ppm_events.c around lines 1109 and 1127, tracing the product assigned to u32 and how j is used after the userspace copy. Confirm the fix preserves the full 64-bit value and prevents j from reading beyond the copied data.
Written by the indexing model from the issue text.
Description
There's an integer truncation here when we assign the product of an unsigned long to a u32:
j can now advance past what we copied from userspace leading to an out of bounds read:
https://github.com/draios/sysdig/blob/123ba4d1a3bb5534ec8b92bbb10a356ff9652a5d/driver/ppm_events.c#L1127
- Dominant language
- C++
- Stars
- 8.3k
- Forks
- 753
- PR merge metrics
- No merged PRs in 30d
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from draios/sysdig
-
Difficulty 4/5 3-5 days Newbie friendliness 52/100
-
Difficulty 3/5 1-2 days Newbie friendliness 48/100
-
Difficulty 4/5 3-5 days Newbie friendliness 48/100
-
difficulty-easy feature-request pinned
Difficulty 3/5 1-2 days Newbie friendliness 25/100
-
feature-request pinned
Difficulty 5/5 Over a week Newbie friendliness 25/100
Similar issues
-
Difficulty 1/5 Under an hour Newbie friendliness 90/100
AXERA-TECH/ax-llm#77 ·
-
Difficulty 1/5 Under an hour Newbie friendliness 90/100
games-on-whales/wolf#509 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 74/100
-
bug-unconfirmed
Difficulty 2/5 1-3 hours Newbie friendliness 76/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 74/100
NVIDIA/cuda-samples#453 ·