Skip to content
GitLab
Projects Groups Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Register
  • Sign in
  • G GLib
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 851
    • Issues 851
    • List
    • Boards
    • Service Desk
    • Milestones
  • Merge requests 47
    • Merge requests 47
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
  • Deployments
    • Deployments
    • Releases
  • Packages and registries
    • Packages and registries
    • Container Registry
  • Analytics
    • Analytics
    • Value stream
    • CI/CD
    • Repository
  • Wiki
    • Wiki
  • Snippets
    • Snippets
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • GNOMEGNOME
  • GLib
  • Issues
  • #2528
Closed
Open
Issue created Nov 10, 2021 by Sebastian Wilhelmi@wilhelmiReporter

g_dbus_message_new_from_blob goes into infinite loop for certain inputs

This is a clear DoS attack vector, so I'm reporting this in a confidential issue

This causes https://oss-fuzz.com/testcase-detail/5746957250723840.

After some debugging I found the reason to be that the decoder wants to read an array length, but its at the end of the buffer, which gets interpreted as length 0 and it will continue infinitely.

The following diff fixes the problem.

Assignee
Assign to
Time tracking