Created attachment 1314521 [details] Triggered by "./exiv2 $POC7" Description of problem: There is a memory leak in libsass Version-Release number of selected component (if applicable): <= latest version How reproducible: ./sassc $POC Steps to Reproduce: The debugging information is as follows: ASAN && GDB debugging information: (gdb) set args bin/collAFL-output/crashes/id:000026,sig:11,src:008918,op:havoc,rep:8 (gdb) r Starting program: /home/icy/libsass-check/sassc-asan/install/bin/sassc bin/collAFL-output/crashes/id:000026,sig:11,src:008918,op:havoc,rep:8 [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". Error: Code too deeply neested on line 1 of bin/collAFL-output/crashes/id:000026,sig:11,src:008918,op:havoc,rep:8 >> t() )罂Θ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((( ------------------------------------------^ ================================================================= ==70213==ERROR: LeakSanitizer: detected memory leaks Direct leak of 160 byte(s) in 1 object(s) allocated from: #0 0x4dc952 (/home/icy/libsass-check/sassc-asan/install/bin/sassc+0x4dc952) #1 0x7ffff775a0eb (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x4870eb) #2 0x7ffff7750309 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47d309) #3 0x7ffff774ce7a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x479e7a) #4 0x7ffff774417a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47117a) #5 0x7ffff77420ad (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46f0ad) #6 0x7ffff773fc6a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46cc6a) #7 0x7ffff773e42a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46b42a) #8 0x7ffff7705263 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x432263) #9 0x7ffff773693b (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46393b) #10 0x7ffff774f59d (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47c59d) #11 0x7ffff774ce7a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x479e7a) #12 0x7ffff774417a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47117a) #13 0x7ffff77420ad (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46f0ad) #14 0x7ffff773fc6a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46cc6a) #15 0x7ffff773e42a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46b42a) #16 0x7ffff7705263 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x432263) #17 0x7ffff77098da (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x4368da) #18 0x7ffff77073aa (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x4343aa) #19 0x7ffff7763696 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x490696) #20 0x7ffff77512b5 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47e2b5) #21 0x7ffff774ce7a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x479e7a) #22 0x7ffff774417a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47117a) #23 0x7ffff77420ad (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46f0ad) #24 0x7ffff773fc6a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46cc6a) #25 0x7ffff773e42a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46b42a) #26 0x7ffff7705cf6 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x432cf6) #27 0x7ffff773c631 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x469631) #28 0x7ffff7700499 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x42d499) #29 0x7ffff775b3f4 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x4883f4) Direct leak of 160 byte(s) in 1 object(s) allocated from: #0 0x4dc952 (/home/icy/libsass-check/sassc-asan/install/bin/sassc+0x4dc952) #1 0x7ffff775a0eb (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x4870eb) #2 0x7ffff7750309 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47d309) #3 0x7ffff774ce7a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x479e7a) #4 0x7ffff774417a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47117a) #5 0x7ffff77420ad (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46f0ad) #6 0x7ffff773fc6a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46cc6a) #7 0x7ffff773e42a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46b42a) #8 0x7ffff7705cf6 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x432cf6) #9 0x7ffff77098da (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x4368da) #10 0x7ffff77073aa (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x4343aa) #11 0x7ffff7763696 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x490696) #12 0x7ffff77512b5 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47e2b5) #13 0x7ffff774ce7a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x479e7a) #14 0x7ffff774417a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47117a) #15 0x7ffff77420ad (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46f0ad) #16 0x7ffff773fc6a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46cc6a) #17 0x7ffff773e42a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46b42a) #18 0x7ffff7705cf6 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x432cf6) #19 0x7ffff77098da (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x4368da) #20 0x7ffff77073aa (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x4343aa) #21 0x7ffff7763696 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x490696) #22 0x7ffff77512b5 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47e2b5) #23 0x7ffff774ce7a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x479e7a) #24 0x7ffff774417a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47117a) #25 0x7ffff77420ad (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46f0ad) #26 0x7ffff773fc6a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46cc6a) #27 0x7ffff773e42a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46b42a) #28 0x7ffff7705cf6 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x432cf6) #29 0x7ffff77098da (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x4368da) Direct leak of 160 byte(s) in 1 object(s) allocated from: #0 0x4dc952 (/home/icy/libsass-check/sassc-asan/install/bin/sassc+0x4dc952) #1 0x7ffff775a0eb (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x4870eb) #2 0x7ffff7750309 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47d309) #3 0x7ffff774ce7a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x479e7a) #4 0x7ffff774417a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47117a) #5 0x7ffff77420ad (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46f0ad) #6 0x7ffff773fc6a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46cc6a) #7 0x7ffff773e42a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46b42a) #8 0x7ffff7705263 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x432263) #9 0x7ffff773c631 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x469631) #10 0x7ffff7700499 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x42d499) #11 0x7ffff76cd838 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x3fa838) #12 0x7ffff76c3c8a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x3f0c8a) #13 0x7ffff76bd037 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x3ea037) Direct leak of 160 byte(s) in 1 object(s) allocated from: #0 0x4dc952 (/home/icy/libsass-check/sassc-asan/install/bin/sassc+0x4dc952) #1 0x7ffff775a0eb (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x4870eb) #2 0x7ffff7750309 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47d309) #3 0x7ffff774ce7a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x479e7a) #4 0x7ffff774417a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47117a) #5 0x7ffff77420ad (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46f0ad) #6 0x7ffff773fc6a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46cc6a) #7 0x7ffff773e42a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46b42a) #8 0x7ffff7705cf6 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x432cf6) #9 0x7ffff77098da (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x4368da) #10 0x7ffff77073aa (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x4343aa) #11 0x7ffff7763696 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x490696) #12 0x7ffff77512b5 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47e2b5) #13 0x7ffff774ce7a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x479e7a) #14 0x7ffff774417a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47117a) #15 0x7ffff77420ad (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46f0ad) #16 0x7ffff773fc6a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46cc6a) #17 0x7ffff773e42a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46b42a) #18 0x7ffff7705cf6 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x432cf6) #19 0x7ffff773c631 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x469631) #20 0x7ffff7700499 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x42d499) #21 0x7ffff775b3f4 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x4883f4) #22 0x7ffff7750309 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47d309) #23 0x7ffff774ce7a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x479e7a) #24 0x7ffff774417a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47117a) #25 0x7ffff77420ad (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46f0ad) #26 0x7ffff773fc6a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46cc6a) #27 0x7ffff773e42a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46b42a) #28 0x7ffff7705263 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x432263) #29 0x7ffff773c631 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x469631) Indirect leak of 192 byte(s) in 4 object(s) allocated from: #0 0x4dc952 (/home/icy/libsass-check/sassc-asan/install/bin/sassc+0x4dc952) #1 0x7ffff750b380 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x238380) Indirect leak of 160 byte(s) in 1 object(s) allocated from: #0 0x4dc952 (/home/icy/libsass-check/sassc-asan/install/bin/sassc+0x4dc952) #1 0x7ffff775a5f0 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x4875f0) #2 0x7ffff7750309 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47d309) #3 0x7ffff774ce7a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x479e7a) #4 0x7ffff774417a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47117a) #5 0x7ffff77420ad (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46f0ad) #6 0x7ffff773fc6a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46cc6a) #7 0x7ffff773e42a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46b42a) #8 0x7ffff7705cf6 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x432cf6) #9 0x7ffff77098da (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x4368da) #10 0x7ffff77073aa (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x4343aa) #11 0x7ffff7763696 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x490696) #12 0x7ffff77512b5 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47e2b5) #13 0x7ffff774ce7a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x479e7a) #14 0x7ffff774417a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47117a) #15 0x7ffff77420ad (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46f0ad) #16 0x7ffff773fc6a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46cc6a) #17 0x7ffff773e42a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46b42a) #18 0x7ffff7705cf6 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x432cf6) #19 0x7ffff77098da (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x4368da) #20 0x7ffff77073aa (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x4343aa) #21 0x7ffff7763696 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x490696) #22 0x7ffff77512b5 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47e2b5) #23 0x7ffff774ce7a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x479e7a) #24 0x7ffff774417a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47117a) #25 0x7ffff77420ad (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46f0ad) #26 0x7ffff773fc6a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46cc6a) #27 0x7ffff773e42a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46b42a) #28 0x7ffff7705cf6 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x432cf6) #29 0x7ffff77098da (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x4368da) Indirect leak of 160 byte(s) in 1 object(s) allocated from: #0 0x4dc952 (/home/icy/libsass-check/sassc-asan/install/bin/sassc+0x4dc952) #1 0x7ffff775a5f0 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x4875f0) #2 0x7ffff7750309 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47d309) #3 0x7ffff774ce7a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x479e7a) #4 0x7ffff774417a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47117a) #5 0x7ffff77420ad (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46f0ad) #6 0x7ffff773fc6a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46cc6a) #7 0x7ffff773e42a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46b42a) #8 0x7ffff7705263 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x432263) #9 0x7ffff773693b (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46393b) #10 0x7ffff774f59d (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47c59d) #11 0x7ffff774ce7a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x479e7a) #12 0x7ffff774417a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47117a) #13 0x7ffff77420ad (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46f0ad) #14 0x7ffff773fc6a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46cc6a) #15 0x7ffff773e42a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46b42a) #16 0x7ffff7705263 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x432263) #17 0x7ffff77098da (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x4368da) #18 0x7ffff77073aa (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x4343aa) #19 0x7ffff7763696 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x490696) #20 0x7ffff77512b5 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47e2b5) #21 0x7ffff774ce7a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x479e7a) #22 0x7ffff774417a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47117a) #23 0x7ffff77420ad (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46f0ad) #24 0x7ffff773fc6a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46cc6a) #25 0x7ffff773e42a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46b42a) #26 0x7ffff7705cf6 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x432cf6) #27 0x7ffff773c631 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x469631) #28 0x7ffff7700499 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x42d499) #29 0x7ffff775b3f4 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x4883f4) Indirect leak of 160 byte(s) in 1 object(s) allocated from: #0 0x4dc952 (/home/icy/libsass-check/sassc-asan/install/bin/sassc+0x4dc952) #1 0x7ffff775aebe (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x487ebe) #2 0x7ffff7750309 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47d309) #3 0x7ffff774ce7a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x479e7a) #4 0x7ffff774417a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47117a) #5 0x7ffff77420ad (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46f0ad) #6 0x7ffff773fc6a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46cc6a) #7 0x7ffff773e42a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46b42a) #8 0x7ffff7705263 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x432263) #9 0x7ffff773c631 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x469631) #10 0x7ffff7700499 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x42d499) #11 0x7ffff76cd838 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x3fa838) #12 0x7ffff76c3c8a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x3f0c8a) #13 0x7ffff76bd037 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x3ea037) Indirect leak of 160 byte(s) in 1 object(s) allocated from: #0 0x4dc952 (/home/icy/libsass-check/sassc-asan/install/bin/sassc+0x4dc952) #1 0x7ffff775a5f0 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x4875f0) #2 0x7ffff7750309 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47d309) #3 0x7ffff774ce7a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x479e7a) #4 0x7ffff774417a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47117a) #5 0x7ffff77420ad (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46f0ad) #6 0x7ffff773fc6a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46cc6a) #7 0x7ffff773e42a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46b42a) #8 0x7ffff7705cf6 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x432cf6) #9 0x7ffff77098da (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x4368da) #10 0x7ffff77073aa (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x4343aa) #11 0x7ffff7763696 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x490696) #12 0x7ffff77512b5 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47e2b5) #13 0x7ffff774ce7a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x479e7a) #14 0x7ffff774417a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47117a) #15 0x7ffff77420ad (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46f0ad) #16 0x7ffff773fc6a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46cc6a) #17 0x7ffff773e42a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46b42a) #18 0x7ffff7705cf6 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x432cf6) #19 0x7ffff773c631 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x469631) #20 0x7ffff7700499 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x42d499) #21 0x7ffff775b3f4 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x4883f4) #22 0x7ffff7750309 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47d309) #23 0x7ffff774ce7a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x479e7a) #24 0x7ffff774417a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47117a) #25 0x7ffff77420ad (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46f0ad) #26 0x7ffff773fc6a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46cc6a) #27 0x7ffff773e42a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46b42a) #28 0x7ffff7705263 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x432263) #29 0x7ffff773c631 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x469631) Indirect leak of 160 byte(s) in 1 object(s) allocated from: #0 0x4dc952 (/home/icy/libsass-check/sassc-asan/install/bin/sassc+0x4dc952) #1 0x7ffff775aebe (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x487ebe) #2 0x7ffff7750309 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47d309) #3 0x7ffff774ce7a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x479e7a) #4 0x7ffff774417a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47117a) #5 0x7ffff77420ad (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46f0ad) #6 0x7ffff773fc6a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46cc6a) #7 0x7ffff773e42a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46b42a) #8 0x7ffff7705cf6 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x432cf6) #9 0x7ffff77098da (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x4368da) #10 0x7ffff77073aa (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x4343aa) #11 0x7ffff7763696 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x490696) #12 0x7ffff77512b5 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47e2b5) #13 0x7ffff774ce7a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x479e7a) #14 0x7ffff774417a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47117a) #15 0x7ffff77420ad (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46f0ad) #16 0x7ffff773fc6a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46cc6a) #17 0x7ffff773e42a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46b42a) #18 0x7ffff7705cf6 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x432cf6) #19 0x7ffff773c631 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x469631) #20 0x7ffff7700499 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x42d499) #21 0x7ffff775b3f4 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x4883f4) #22 0x7ffff7750309 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47d309) #23 0x7ffff774ce7a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x479e7a) #24 0x7ffff774417a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47117a) #25 0x7ffff77420ad (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46f0ad) #26 0x7ffff773fc6a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46cc6a) #27 0x7ffff773e42a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46b42a) #28 0x7ffff7705263 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x432263) #29 0x7ffff773c631 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x469631) Indirect leak of 160 byte(s) in 1 object(s) allocated from: #0 0x4dc952 (/home/icy/libsass-check/sassc-asan/install/bin/sassc+0x4dc952) #1 0x7ffff775a5f0 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x4875f0) #2 0x7ffff7750309 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47d309) #3 0x7ffff774ce7a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x479e7a) #4 0x7ffff774417a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47117a) #5 0x7ffff77420ad (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46f0ad) #6 0x7ffff773fc6a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46cc6a) #7 0x7ffff773e42a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46b42a) #8 0x7ffff7705263 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x432263) #9 0x7ffff773c631 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x469631) #10 0x7ffff7700499 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x42d499) #11 0x7ffff76cd838 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x3fa838) #12 0x7ffff76c3c8a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x3f0c8a) #13 0x7ffff76bd037 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x3ea037) Indirect leak of 160 byte(s) in 1 object(s) allocated from: #0 0x4dc952 (/home/icy/libsass-check/sassc-asan/install/bin/sassc+0x4dc952) #1 0x7ffff775aebe (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x487ebe) #2 0x7ffff7750309 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47d309) #3 0x7ffff774ce7a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x479e7a) #4 0x7ffff774417a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47117a) #5 0x7ffff77420ad (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46f0ad) #6 0x7ffff773fc6a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46cc6a) #7 0x7ffff773e42a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46b42a) #8 0x7ffff7705cf6 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x432cf6) #9 0x7ffff77098da (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x4368da) #10 0x7ffff77073aa (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x4343aa) #11 0x7ffff7763696 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x490696) #12 0x7ffff77512b5 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47e2b5) #13 0x7ffff774ce7a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x479e7a) #14 0x7ffff774417a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47117a) #15 0x7ffff77420ad (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46f0ad) #16 0x7ffff773fc6a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46cc6a) #17 0x7ffff773e42a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46b42a) #18 0x7ffff7705cf6 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x432cf6) #19 0x7ffff77098da (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x4368da) #20 0x7ffff77073aa (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x4343aa) #21 0x7ffff7763696 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x490696) #22 0x7ffff77512b5 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47e2b5) #23 0x7ffff774ce7a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x479e7a) #24 0x7ffff774417a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47117a) #25 0x7ffff77420ad (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46f0ad) #26 0x7ffff773fc6a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46cc6a) #27 0x7ffff773e42a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46b42a) #28 0x7ffff7705cf6 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x432cf6) #29 0x7ffff77098da (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x4368da) Indirect leak of 160 byte(s) in 1 object(s) allocated from: #0 0x4dc952 (/home/icy/libsass-check/sassc-asan/install/bin/sassc+0x4dc952) #1 0x7ffff775aebe (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x487ebe) #2 0x7ffff7750309 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47d309) #3 0x7ffff774ce7a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x479e7a) #4 0x7ffff774417a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47117a) #5 0x7ffff77420ad (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46f0ad) #6 0x7ffff773fc6a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46cc6a) #7 0x7ffff773e42a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46b42a) #8 0x7ffff7705263 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x432263) #9 0x7ffff773693b (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46393b) #10 0x7ffff774f59d (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47c59d) #11 0x7ffff774ce7a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x479e7a) #12 0x7ffff774417a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47117a) #13 0x7ffff77420ad (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46f0ad) #14 0x7ffff773fc6a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46cc6a) #15 0x7ffff773e42a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46b42a) #16 0x7ffff7705263 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x432263) #17 0x7ffff77098da (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x4368da) #18 0x7ffff77073aa (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x4343aa) #19 0x7ffff7763696 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x490696) #20 0x7ffff77512b5 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47e2b5) #21 0x7ffff774ce7a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x479e7a) #22 0x7ffff774417a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x47117a) #23 0x7ffff77420ad (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46f0ad) #24 0x7ffff773fc6a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46cc6a) #25 0x7ffff773e42a (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x46b42a) #26 0x7ffff7705cf6 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x432cf6) #27 0x7ffff773c631 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x469631) #28 0x7ffff7700499 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x42d499) #29 0x7ffff775b3f4 (/home/icy/libsass-check/libsass-asan/install/lib/libsass.so.1+0x4883f4) SUMMARY: AddressSanitizer: 2112 byte(s) leaked in 16 allocation(s). [Inferior 1 (process 70213) exited with code 027] (gdb) Actual results: crash Expected results: crash Additional info: Credits: This vulnerability is detected by team OWL337, with our custom fuzzer collAFL. Please contact ganshuitao and chaoz.cn if you need more info about the team, the tool or the vulnerability.
This bug appears to have been reported against 'rawhide' during the Fedora 28 development cycle. Changing version to '28'.
From https://github.com/sass/libsass/blob/master/SECURITY.md > If you believe you have discovered a security vulnerability, > please report it at https://hackerone.com/libsass instead of GitHub. Did you do that?
(In reply to Andreas Stieger from comment #2) > From https://github.com/sass/libsass/blob/master/SECURITY.md > > > If you believe you have discovered a security vulnerability, > > please report it at https://hackerone.com/libsass instead of GitHub. > > Did you do that? Sorry to be late, the latest version of libsass already fixed this issue.
@Andreas Stieger, I am the founder of team owl337, I have report it.
(In reply to Andreas Stieger from comment #2) > From https://github.com/sass/libsass/blob/master/SECURITY.md > > > If you believe you have discovered a security vulnerability, > > please report it at https://hackerone.com/libsass instead of GitHub. > > Did you do that? The latest version of libsass has already fixed this issue.
This message is a reminder that Fedora 28 is nearing its end of life. On 2019-May-28 Fedora will stop maintaining and issuing updates for Fedora 28. It is Fedora's policy to close all bug reports from releases that are no longer maintained. At that time this bug will be closed as EOL if it remains open with a Fedora 'version' of '28'. Package Maintainer: If you wish for this bug to remain open because you plan to fix it in a currently maintained version, simply change the 'version' to a later Fedora version. Thank you for reporting this issue and we are sorry that we were not able to fix it before Fedora 28 is end of life. If you would still like to see this bug fixed and are able to reproduce it against a later version of Fedora, you are encouraged change the 'version' to a later Fedora version prior this bug is closed as described in the policy above. Although we aim to fix as many bugs as possible during every release's lifetime, sometimes those efforts are overtaken by events. Often a more recent Fedora release includes newer upstream software that fixes bugs or makes them obsolete.