Uploaded image for project: 'Couchbase C client library libcouchbase'
  1. Couchbase C client library libcouchbase
  2. CCBC-1599

IPv6 bootstrap string triggers ASAN check

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • Major
    • 3.3.8
    • None
    • library
    • None
    • 0

    Description

      Reproduction:

      cbc get -U couchbase://::1/default?ipv6=allow foo
      

      Heap-buffer-overflow on address 0x602000018535 at pc 0x00000045351d bp 0x7ffd83d06a10 sp 0x7ffd83d061d8
      READ of size 6 at 0x602000018535 thread T0
        at 0x45351c strlen
        at 0x7fa9482dd762 replace_hoststr (vbucket.c:786)
        at 0x7fa9482dd47d lcbvb_replace_host (vbucket.c:824)
        at 0x7fa948384e2c CccpProvider::update(char const*, char const*) (bc_cccp.cc:226)
        at 0x7fa948386fce CccpProvider::on_io_read() (bc_cccp.cc:431)
        at 0x7fa948387d90 io_read_handler(lcbio_CTX*, unsigned int) (bc_cccp.cc:378)
        at 0x7fa948330ffd invoke_read_cb(lcbio_CTX*, unsigned int) (ctx.cc:251)
        at 0x7fa9483304dd E_handler(int, short, void*) (ctx.cc:278)
        at 0x7fa9482cea42 run_loop (plugin-select.c:309)
        at 0x7fa9482ccf6f sel_run_loop (plugin-select.c:318)
        at 0x7fa9485fa5e7 lcb_wait (wait.cc:108)
        at 0x58ff2b cbc::Handler::run() (cbc.cc:764)
        at 0x5906f8 cbc::GetHandler::run() (cbc.cc:810)
        at 0x58f8db cbc::Handler::execute(int, char**) (cbc.cc:737)
        at 0x5b7707 main (cbc.cc:2547)
        at 0x7fa947649b49 __libc_start_call_main
        at 0x7fa947649c0a __libc_start_main@GLIBC_2.2.5
        at 0x43cb84 _start
      Allocated by thread T0 here:
        at 0x4d790c __interceptor_calloc
        at 0x7fa9482dd1af lcbvb_replace_host (vbucket.c:807)
        at 0x7fa948384e2c CccpProvider::update(char const*, char const*) (bc_cccp.cc:226)
        at 0x7fa948386fce CccpProvider::on_io_read() (bc_cccp.cc:431)
        at 0x7fa948387d90 io_read_handler(lcbio_CTX*, unsigned int) (bc_cccp.cc:378)
        at 0x7fa948330ffd invoke_read_cb(lcbio_CTX*, unsigned int) (ctx.cc:251)
        at 0x7fa9483304dd E_handler(int, short, void*) (ctx.cc:278)
        at 0x7fa9482cea42 run_loop (plugin-select.c:309)
        at 0x7fa9482ccf6f sel_run_loop (plugin-select.c:318)
        at 0x7fa9485fa5e7 lcb_wait (wait.cc:108)
        at 0x58ff2b cbc::Handler::run() (cbc.cc:764)
        at 0x5906f8 cbc::GetHandler::run() (cbc.cc:810)
        at 0x58f8db cbc::Handler::execute(int, char**) (cbc.cc:737)
        at 0x5b7707 main (cbc.cc:2547)
        at 0x7fa947649b49 __libc_start_call_main
        at 0x7fa947649c0a __libc_start_main@GLIBC_2.2.5
        at 0x43cb84 _start
      

      Attachments

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

        Activity

          People

            avsej Sergey Avseyev
            avsej Sergey Avseyev
            Votes:
            1 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Gerrit Reviews

                There are no open Gerrit changes

                PagerDuty