Bug 66693 - AddressSanitizer: SEGV (/lib/x86_64-linux-gnu/libdb-5.3.so+0x4e81e) in __ham_lookup
Summary: AddressSanitizer: SEGV (/lib/x86_64-linux-gnu/libdb-5.3.so+0x4e81e) in __ham_...
Status: NEW
Alias: None
Product: Apache httpd-2
Classification: Unclassified
Component: mod_authn_dbm (show other bugs)
Version: 2.4.54
Hardware: PC Linux
: P2 normal (vote)
Target Milestone: ---
Assignee: Apache HTTPD Bugs Mailing List
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2023-07-15 08:17 UTC by sihan2021
Modified: 2023-07-15 08:17 UTC (History)
0 users


Attachments
crash seed (12.00 KB, model/x.stl-binary)
2023-07-15 08:17 UTC, sihan2021 		Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description sihan2021 2023-07-15 08:17:53 UTC 
Created attachment 38607 [details]
crash seed

Hello htdbm developers,
We recently conducted a fuzzing test on htdbm and discovered a SEGV bug. We would like to provide a detailed description of the bug and seek your assistance in addressing it.

version:
htdbm: 2.4.54
gcc:gcc version 9.4.0 (Ubuntu 9.4.0-1ubuntu1~20.04.1)
ubuntu: 20.04

command to reproduce:
htdbm -b SEGV_3 isap Pwd4Steve
SEGV_3 is attached to this report.


ASAN report:
=================================================================
==2665271==ERROR: AddressSanitizer: SEGV on unknown address 0x621000010d35 (pc 0x7f9064b9f81e bp 0x7ffc9422b450 sp 0x7ffc9422b220 T0)
==2665271==The signal is caused by a READ memory access.
    #0 0x7f9064b9f81e in __ham_lookup (/lib/x86_64-linux-gnu/libdb-5.3.so+0x4e81e)
    #1 0x7f9064b9f91a  (/lib/x86_64-linux-gnu/libdb-5.3.so+0x4e91a)
    #2 0x7f9064c36f89 in __dbc_iget (/lib/x86_64-linux-gnu/libdb-5.3.so+0xe5f89)
    #3 0x7f9064c43451 in __db_get (/lib/x86_64-linux-gnu/libdb-5.3.so+0xf2451)
    #4 0x7f9064c46f03 in __db_get_pp (/lib/x86_64-linux-gnu/libdb-5.3.so+0xf5f03)
    #5 0x7f906589725d  (/usr/lib/x86_64-linux-gnu/apr-util-1/apr_dbm_db-1.so+0x125d)
    #6 0x4d05b9 in htdbm_save /home/root/sp/Dataset/Httpd/httpd_aflpp/support/htdbm.c:164:9
    #7 0x4cd974 in main /home/root/sp/Dataset/Httpd/httpd_aflpp/support/htdbm.c:453:19
    #8 0x7f9066597082 in __libc_start_main /build/glibc-SzIz7B/glibc-2.31/csu/../csu/libc-start.c:308:16
    #9 0x41d58d in _start (/home/root/sp/Fuzz/aflpp_fuzz/Httpd/document_group/mb/htdbm_4/htdbm+0x41d58d)

AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: SEGV (/lib/x86_64-linux-gnu/libdb-5.3.so+0x4e81e) in __ham_lookup
==2665271==ABORTING

Thank you for your attention and support.
Best regards,
Michael Zhang.