Memory Leak in bytes_to_hexstring Function
该报告还没有中文解读。
原文摘录
摘自原文(5293 字符中的一小部分)
Overview The function` bytes_to_hexstring` located in the `utils.c` file has a confirmed memory leak vulnerability. This function is responsible for converting an array of bytes into a hexadecimal string representation. However, it allocates memory dynamically using `malloc` without any error …
原文中的代码
char* bytes_to_hexstring(uint8_t* bytes, size_t len)
{
const char* hexdigs = "0123456789abcdef";
size_t k = len * 2 + 1;
char* out = malloc(k);
for (int i = 0; i < len; i++)
{
out[i * 2] = hexdigs[bytes[i] >> 4];
out[i * 2 + 1] = hexdigs[bytes[i] & 0x0f];
} …默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 Linux Foundation Decentralized Trust 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @cutiapretaa · 版权归作者与 Linux Foundation Decentralized Trust 所有