gdal: Index-out-of-bounds in RECGetField

2017-06-08T23:42:01

Description

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=4790476001509376 Project: gdal Fuzzer: libFuzzer_gdal_rec_fuzzer Fuzz target binary: rec_fuzzer Job Type: libfuzzer_ubsan_gdal Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: RECGetField OGRRECLayer::GetNextUnfilteredFeature OGRRECLayer::GetNextFeature Sanitizer: undefined (UBSAN) Recommended Security Severity: Medium Regressed: https://oss-fuzz.com/revisions?job=libfuzzer_ubsan_gdal&range=201706071658:201706081700 Reproducer Testcase: https://oss-fuzz.com/download?testcase_id=4790476001509376 Issue filed automatically. See https://github.com/google/oss-fuzz/blob/master/docs/reproducing.md for more information. This bug is subject to a 90 day disclosure deadline. If 90 days elapse without an upstream patch, then the bug report will automatically become visible to the public. When you fix this bug, please * mention the fix revision(s). * state whether the bug was a short-lived regression or an old bug in any stable releases. * add any other useful information. This information can help downstream consumers.

Affected Software

CPE Name	Name	Version
	gdal	unknown

{"id": "OSSFUZZ-2165", "type": "ossfuzz", "bulletinFamily": "software", "title": "gdal: Index-out-of-bounds in RECGetField", "description": "Project:\nhttps://github.com/OSGeo/gdal.git\n\nDetailed report: https://oss-fuzz.com/testcase?key=4790476001509376\n\nProject: gdal\nFuzzer: libFuzzer_gdal_rec_fuzzer\nFuzz target binary: rec_fuzzer\nJob Type: libfuzzer_ubsan_gdal\nPlatform Id: linux\n\nCrash Type: Index-out-of-bounds\nCrash Address: \nCrash State:\n RECGetField\n OGRRECLayer::GetNextUnfilteredFeature\n OGRRECLayer::GetNextFeature\n \nSanitizer: undefined (UBSAN)\n\nRecommended Security Severity: Medium\n\nRegressed: https://oss-fuzz.com/revisions?job=libfuzzer_ubsan_gdal&range=201706071658:201706081700\n\nReproducer Testcase: https://oss-fuzz.com/download?testcase_id=4790476001509376\n\n\nIssue filed automatically.\n\nSee https://github.com/google/oss-fuzz/blob/master/docs/reproducing.md for more information.\n\nThis bug is subject to a 90 day disclosure deadline. If 90 days elapse\nwithout an upstream patch, then the bug report will automatically\nbecome visible to the public.\n\nWhen you fix this bug, please\n * mention the fix revision(s).\n * state whether the bug was a short-lived regression or an old bug in any stable releases.\n * add any other useful information.\nThis information can help downstream consumers.", "published": "2017-06-08T23:42:01", "modified": "2017-07-10T13:04:36", "cvss": {}, "href": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2165", "reporter": "Google", "references": [], "cvelist": [], "lastseen": "2020-04-03T14:04:53", "viewCount": 2, "enchantments": {"dependencies": {}, "score": {"value": -0.5, "vector": "NONE"}, "backreferences": {}, "exploitation": null, "vulnersScore": -0.5}, "ossfuzz": {"issue": 2165, "status": "Verified", "project": "gdal", "ref": "https://oss-fuzz.com/revisions?job=libfuzzer_ubsan_gdal&range=201706081700:201706091706", "crashType": "Index-out-of-bounds", "revisions": ["6d269cfdd30fd0be0c45fce1f482174bac16b4af:21934f63d378278979c236bad2f4c240d0b33069"], "project_repos": ["https://github.com/OSGeo/gdal.git"], "error": "no_commits"}, "affectedSoftware": [{"name": "gdal", "version": "unknown", "operator": "eq"}], "immutableFields": [], "cvss2": {}, "cvss3": {}, "_state": {"dependencies": 1645494220, "score": 1659818015, "affected_software_major_version": 1666691171}, "_internal": {"score_hash": "464fa3350b0f797e599c0904cef48215"}}