Search...

gdal: Bad-cast to xercesc_3_1::DOMElement from xercesc_3_1::DOMTextImpl;getPolygon;ILI2Reader::getGeometry

2017-05-23T14:50:25

ID OSSFUZZ-1813
Type ossfuzz
Reporter Google
Modified 2019-03-04T16:56:33

Description

Project: https://github.com/OSGeo/gdal.git

Detailed report: https://oss-fuzz.com/testcase?key=6328230174785536

Project: gdal Fuzzer: libFuzzer_gdal_ogr_fuzzer Fuzz target binary: ogr_fuzzer Job Type: libfuzzer_ubsan_gdal Platform Id: linux

Crash Type: Bad-cast Crash Address: 0x0000080e4d60 Crash State: Bad-cast to xercesc_3_1::DOMElement from xercesc_3_1::DOMTextImpl getPolygon ILI2Reader::getGeometry

Sanitizer: undefined (UBSAN)

Recommended Security Severity: High

Regressed: https://oss-fuzz.com/revisions?job=libfuzzer_ubsan_gdal&range=201705181644:201705211646

Reproducer Testcase: https://oss-fuzz.com/download?testcase_id=6328230174785536

Issue filed automatically.

See https://github.com/google/oss-fuzz/blob/master/docs/reproducing.md for more information.

This bug is subject to a 90 day disclosure deadline. If 90 days elapse without an upstream patch, then the bug report will automatically become visible to the public.

JSON Vulners Source

Initial Source

{"id": "OSSFUZZ-1813", "type": "ossfuzz", "bulletinFamily": "software", "title": "gdal: Bad-cast to xercesc_3_1::DOMElement from xercesc_3_1::DOMTextImpl;getPolygon;ILI2Reader::getGeometry", "description": "Project:\nhttps://github.com/OSGeo/gdal.git\n\nDetailed report: https://oss-fuzz.com/testcase?key=6328230174785536\n\nProject: gdal\nFuzzer: libFuzzer_gdal_ogr_fuzzer\nFuzz target binary: ogr_fuzzer\nJob Type: libfuzzer_ubsan_gdal\nPlatform Id: linux\n\nCrash Type: Bad-cast\nCrash Address: 0x0000080e4d60\nCrash State:\n Bad-cast to xercesc_3_1::DOMElement from xercesc_3_1::DOMTextImpl\n getPolygon\n ILI2Reader::getGeometry\n \nSanitizer: undefined (UBSAN)\n\nRecommended Security Severity: High\n\nRegressed: https://oss-fuzz.com/revisions?job=libfuzzer_ubsan_gdal&range=201705181644:201705211646\n\nReproducer Testcase: https://oss-fuzz.com/download?testcase_id=6328230174785536\n\n\nIssue filed automatically.\n\nSee https://github.com/google/oss-fuzz/blob/master/docs/reproducing.md for more information.\n\nThis bug is subject to a 90 day disclosure deadline. If 90 days elapse\nwithout an upstream patch, then the bug report will automatically\nbecome visible to the public.", "published": "2017-05-23T14:50:25", "modified": "2019-03-04T16:56:33", "cvss": {}, "href": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1813", "reporter": "Google", "references": [], "cvelist": [], "lastseen": "2020-04-03T13:51:28", "viewCount": 2, "enchantments": {"dependencies": {}, "score": {"value": -0.7, "vector": "NONE"}, "backreferences": {}, "exploitation": null, "vulnersScore": -0.7}, "ossfuzz": {"issue": 1813, "status": "Verified", "project": "gdal", "ref": "https://oss-fuzz.com/revisions?job=libfuzzer_ubsan_gdal&range=201705221643:201705231642", "crashType": "Bad-cast", "revisions": ["f8832a177fb2ef58fddbb780a44e77db52bba006:4de236b2d4eb71572f64021ddd021ee04e445880"], "project_repos": ["https://github.com/OSGeo/gdal.git"], "error": "no_commits"}, "affectedSoftware": [{"name": "gdal", "version": "unknown", "operator": "eq"}], "immutableFields": [], "cvss2": {}, "cvss3": {}, "_state": {"dependencies": 1645536152}}