iso-info version 0.93 x86_64-unknown-linux-gnu Copyright (c) 2003-2005, 2007-2008, 2011-2013 R. Bernstein This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. __________________________________ ISO 9660 image: libcdio-heapoverflow-_iso9660_dir_to_statbuf.iso Application : 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 Preparer : 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 Publisher : 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 System : 00000000000000000000000000000000 Volume : 00000000000000000000000000000000 Volume Set : 00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 No Joliet extensions __________________________________ ISO-9660 Information ++ WARN: from_733: broken byte order ++ WARN: from_733: broken byte order ================================================================= ==21292==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x61d00001f280 at pc 0x7f1dcbd1cbe7 bp 0x7fff1287e6b0 sp 0x7fff1287de58 READ of size 48 at 0x61d00001f280 thread T0 #0 0x7f1dcbd1cbe6 in __interceptor_strncpy (/usr/lib/gcc/x86_64-pc-linux-gnu/4.9.2/libasan.so.1+0x2ebe6) #1 0x433f03 in strncpy /usr/include/bits/string3.h:120 #2 0x433f03 in _iso9660_dir_to_statbuf /f/libcdio-0.93/lib/iso9660/iso9660_fs.c:786 #3 0x438244 in iso9660_ifs_readdir /f/libcdio-0.93/lib/iso9660/iso9660_fs.c:1364 #4 0x408098 in print_iso9660_recurse /f/libcdio-0.93/src/iso-info.c:224 #5 0x404de5 in print_iso9660_fs /f/libcdio-0.93/src/iso-info.c:309 #6 0x404de5 in main /f/libcdio-0.93/src/iso-info.c:501 #7 0x7f1dcb674f9f in __libc_start_main (/lib64/libc.so.6+0x1ff9f) #8 0x407e95 (/mnt/ram/libcdio/iso-info+0x407e95) 0x61d00001f280 is located 0 bytes to the right of 2048-byte region [0x61d00001ea80,0x61d00001f280) allocated by thread T0 here: #0 0x7f1dcbd45855 in calloc (/usr/lib/gcc/x86_64-pc-linux-gnu/4.9.2/libasan.so.1+0x57855) #1 0x437e23 in iso9660_ifs_readdir /f/libcdio-0.93/lib/iso9660/iso9660_fs.c:1337 SUMMARY: AddressSanitizer: heap-buffer-overflow ??:0 __interceptor_strncpy Shadow bytes around the buggy address: 0x0c3a7fffbe00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c3a7fffbe10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c3a7fffbe20: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c3a7fffbe30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c3a7fffbe40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 =>0x0c3a7fffbe50:[fa]fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c3a7fffbe60: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c3a7fffbe70: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c3a7fffbe80: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c3a7fffbe90: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c3a7fffbea0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Heap right redzone: fb Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack partial redzone: f4 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Contiguous container OOB:fc ASan internal: fe ==21292==ABORTING