Skip to content

bound aho-corasick state and match indices in yr_rules_from_arena - #2241

Open
jmestwa-coder wants to merge 1 commit into
VirusTotal:masterfrom
jmestwa-coder:ac-table-state-bounds
Open

bound aho-corasick state and match indices in yr_rules_from_arena#2241
jmestwa-coder wants to merge 1 commit into
VirusTotal:masterfrom
jmestwa-coder:ac-table-state-bounds

Conversation

@jmestwa-coder

Copy link
Copy Markdown
Contributor

validate the aho-corasick transition and match tables when loading, otherwise a crafted .yrc whose next-state or match-pool index points past the end of the tables makes the per-byte scan loop in _yr_scanner_scan_mem_block read out of bounds.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant