[Rpm-maint] [rpm-software-management/rpm] invalid read in dataLength / grabData (header.c) (#138)

[Hanno Böck]

The attached file causes an invalid memory read access.
[rpm-invalidread-dataLength-grabData.zip](https://github.com/rpm-software-management/rpm/files/736811/rpm-invalidread-dataLength-grabData.zip)

asan error:
```
==16740==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x7fd8bbe403c6 bp 0x7fff586b2130 sp 0x7fff586b18b8 T0)
==16740==The signal is caused by a READ memory access.
==16740==Hint: address points to the zero page.
    #0 0x7fd8bbe403c5 in strlen (/lib64/libc.so.6+0x7e3c5)
    #1 0x43b8bc in __interceptor_strlen.part.25 (/r/rpm/rpm+0x43b8bc)
    #2 0x5dbdd8 in dataLength /f/rpm/rpm/lib/header.c:432:13
    #3 0x5dbdd8 in grabData /f/rpm/rpm/lib/header.c:1364
    #4 0x5d95bc in intAddEntry /f/rpm/rpm/lib/header.c:1390:12
    #5 0x5d8a50 in headerPut /f/rpm/rpm/lib/header.c:1463:7
    #6 0x5b5c55 in addPrefixes /f/rpm/rpm/lib/relocation.c:64:3
    #7 0x5b5c55 in rpmRelocateFileList /f/rpm/rpm/lib/relocation.c:135
    #8 0x593a2f in getFiles /f/rpm/rpm/lib/rpmte.c:106:3
    #9 0x58f5db in addTE /f/rpm/rpm/lib/rpmte.c:173:16
    #10 0x58f5db in rpmteNew /f/rpm/rpm/lib/rpmte.c:241
    #11 0x512642 in addPackage /f/rpm/rpm/lib/depends.c:438:9
    #12 0x5122e9 in rpmtsAddInstallElement /f/rpm/rpm/lib/depends.c:493:12
    #13 0x57a1d4 in rpmInstall /f/rpm/rpm/lib/rpminstall.c:584:11
    #14 0x5057ae in main /f/rpm/rpm/rpmqv.c:295:12
    #15 0x7fd8bbde278f in __libc_start_main (/lib64/libc.so.6+0x2078f)
    #16 0x41c648 in _start (/r/rpm/rpm+0x41c648)


-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/138
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20170128/0d5b4323/attachment.html>