{"id": "OSSFUZZ-9539", "type": "ossfuzz", "bulletinFamily": "software", "title": "boost/boost_regex_fuzzer: Crash in boost::sub_match<std::__1::__wrap_iter<char const*> >::sub_match", "description": "Project:\nhttps://github.com/boostorg/boost.git\n\nDetailed report: https://oss-fuzz.com/testcase?key=5847161655787520\n\nProject: boost\nFuzzer: libFuzzer_boost_regex_fuzzer\nFuzz target binary: boost_regex_fuzzer\nJob Type: libfuzzer_ubsan_boost\nPlatform Id: linux\n\nCrash Type: UNKNOWN READ\nCrash Address: 0xfffffffffffffd00\nCrash State:\n boost::sub_match<std::__1::__wrap_iter<char const*> >::sub_match\n _ZNSt3__16vectorIN5boost9sub_matchINS_11__wrap_iterIPKcEEEENS_9allocatorIS7_EEE1\n boost::match_results<std::__1::__wrap_iter<char const*>, std::__1::allocator<boo\n \nSanitizer: undefined (UBSAN)\n\nRecommended Security Severity: Medium\n\nRegressed: https://oss-fuzz.com/revisions?job=libfuzzer_ubsan_boost&range=201807170347:201807180341\n\nReproducer Testcase: https://oss-fuzz.com/download?testcase_id=5847161655787520\n\nIssue filed automatically.\n\nSee https://github.com/google/oss-fuzz/blob/master/docs/reproducing.md for more information.\n\nThis bug is subject to a 90 day disclosure deadline. If 90 days elapse\nwithout an upstream patch, then the bug report will automatically\nbecome visible to the public.\n\nWhen you fix this bug, please\n * mention the fix revision(s).\n * state whether the bug was a short-lived regression or an old bug in any stable releases.\n * add any other useful information.\nThis information can help downstream consumers.\n\nIf you need to contact the OSS-Fuzz team with a question, concern, or any other feedback, please file an issue at https://github.com/google/oss-fuzz/issues.", "published": "2018-07-22T11:49:01", "modified": "2018-09-30T15:24:25", "cvss": {}, "href": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9539", "reporter": "Google", "references": [], "cvelist": [], "lastseen": "2020-04-03T13:54:45", "viewCount": 1, "enchantments": {"dependencies": {"references": [], "modified": "2020-04-03T13:54:45", "rev": 2}, "score": {"value": -0.8, "vector": "NONE", "modified": "2020-04-03T13:54:45", "rev": 2}, "vulnersScore": -0.8}, "ossfuzz": {"issue": 9539, "status": "Verified", "project": "boost", "ref": "https://oss-fuzz.com/revisions?job=libfuzzer_ubsan_boost&range=201808290153:201808300153", "crashType": "UNKNOWN READ", "revisions": ["a61167693de9b8e10434368fb8af670ed7f80c5c:812a820e234fd3cb1f857d16b6b5c51ed0b1201d"], "project_repos": ["https://github.com/boostorg/boost.git"], "tags": ["1.72.0", "1.72.0-beta1", "1.71.0", "1.71.0-beta1", "1.70.0", "1.70.0-beta1", "1.69.0", "1.69.0-beta1", "1.68.0", "1.67.0", "1.67.0-beta1", "1.66.0", "1.66.0-beta1", "1.65.1", "1.65.0", "1.65.0-beta1", "1.64.0", "1.64.0-beta2", "1.64.0-beta1", "1.63.0", "1.63.0-beta1", "1.62.0", "1.62.0-beta1", "1.61.0", "1.61.0-beta1", "1.60.0", "1.60.0-beta1", "1.59.0", "1.58.0", "1.57.0", "1.57.0-beta1", "1.56.0", "1.56.0-beta1"]}, "affectedSoftware": [{"name": "boost", "version": "1.68.0", "operator": "eq"}, {"name": "boost", "version": "1.67.0", "operator": "eq"}, {"name": "boost", "version": "1.67.0-beta1", "operator": "eq"}, {"name": "boost", "version": "1.66.0", "operator": "eq"}, {"name": "boost", "version": "1.66.0-beta1", "operator": "eq"}, {"name": "boost", "version": "1.65.1", "operator": "eq"}, {"name": "boost", "version": "1.65.0", "operator": "eq"}, {"name": "boost", "version": "1.65.0-beta1", "operator": "eq"}, {"name": "boost", "version": "1.64.0", "operator": "eq"}, {"name": "boost", "version": "1.64.0-beta2", "operator": "eq"}, {"name": "boost", "version": "1.64.0-beta1", "operator": "eq"}, {"name": "boost", "version": "1.63.0", "operator": "eq"}, {"name": "boost", "version": "1.63.0-beta1", "operator": "eq"}, {"name": "boost", "version": "1.62.0", "operator": "eq"}, {"name": "boost", "version": "1.62.0-beta1", "operator": "eq"}, {"name": "boost", "version": "1.61.0", "operator": "eq"}, {"name": "boost", "version": "1.61.0-beta1", "operator": "eq"}, {"name": "boost", "version": "1.60.0", "operator": "eq"}, {"name": "boost", "version": "1.60.0-beta1", "operator": "eq"}, {"name": "boost", "version": "1.59.0", "operator": "eq"}, {"name": "boost", "version": "1.58.0", "operator": "eq"}, {"name": "boost", "version": "1.57.0", "operator": "eq"}, {"name": "boost", "version": "1.57.0-beta1", "operator": "eq"}, {"name": "boost", "version": "1.56.0", "operator": "eq"}, {"name": "boost", "version": "1.56.0-beta1", "operator": "eq"}]}

{}