800+ IT
News
als RSS Feed abonnieren📚 Open-Xchange: Failed assert in `mail_index_transaction_lookup`
💡 Newskategorie: Sicherheitslücken
🔗 Quelle: vulners.com
To reproduce, run test suite on following input : require"vnd.dovecot.testsuite";require "fileinto";require "mailbox";test"" {fileinto:create "Folder"; if test_result_execute { }test_message:folder "Folder" 2;} Output is with (ASAN enabled) stack trace testsuite: Panic: file mail-index-transaction-update.c: line 19 (mail_index_transaction_lookup): assertion failed: (seq >= t->first_new_seq && seq <= t->last_new_seq) ==88957== ERROR: libFuzzer: deadly signal #0 0x10ccb10e7 in __sanitizer_print_stack_trace (libclang_rt.asan_osx_dynamic.dylib:x86_64h+0x600e7) #1 0x10c4b2d5a in fuzzer::PrintStackTrace() FuzzerUtil.cpp:205 #2 0x10c494b66 in fuzzer::Fuzzer::CrashCallback() FuzzerLoop.cpp:232 #3 0x7fff6121df59 in _sigtramp (libsystem_platform.dylib:x86_64+0x1f59) #4 0x11427ca3f in initialPoolContent (dyld:x86_64+0x52a3f) #5 0x7fff60fbb1ad in abort (libsystem_c.dylib:x86_64+0x5d1ad) #6 0x10cb15a55 in default_fatal_finish failures.c:459 #7 0x10cb1425c in fatal_handler_real failures.c:471 #8 0x10cb14220 in default_fatal_handler failures.c:479 #9 0x10cb1445f in i_panic failures.c:523 #10 0x10c9aa992 in mail_index_transaction_lookup mail-index-transaction-update.c:19 #11 0x10c9ae4a2 in tview_lookup_uid mail-index-transaction-view.c:162 #12 0x10c97cc97 in index_mail_set_seq index-mail.c:1999 #13 0x10c468a49 in testsuite_mailstore_mail_index testsuite-mailstore.c:271 #14 0x10c46e3ac in cmd_test_message_mailbox_operation_execute... ...