This issue may occur when a program links against a library with a vulnerable version.
An input file with a sequence of code of the form __attribute__((constructor()))) followed by a sequence of the form (1,2,3) and a sequence of the form ++(1,2,3) may cause a crash in this context.
An input file with a sequence of the form __attribute__((constructor()))) followed by a sequence of the form (1,2,3) and a sequence of the form __(1,2,3) may also cause a crash.
An input file with a sequence of the form __attribute__((constructor()))) followed by a sequence of the form (1,2,3) followed by __(1,2,3) may also cause a crash.
An input file with a sequence of the form __attribute__((constructor()))) followed by a sequence of the form (1,2,3) followed by __(1,2,3) followed by __(1,2,3) may also cause a crash.
An input file with a sequence of the form __attribute__((constructor()))) followed by a sequence of the form (1,2,3) followed by __(1,2,3) followed by __(1,2,3) followed by __(1,2,3) may also cause
Operation Scenarios
The following scenarios may cause a crash in this context:An input file with a sequence of code of the form __attribute__((constructor()))) followed by a sequence of the form (1,2,3) and a sequence of the form ++(1,2,3) may cause a crash in this context.An input file with a sequence of the form __attribute__((constructor()))) followed by a sequence of the form (1,2,3) and a sequence of the form __(1,2,3) may also cause a crash.An input file with a sequence of the form __attribute__((constructor())) followed by a sequence of the form (1,2,3) followed by __(1,2,3) may also cause a crash.An input file with a sequence of the form __attribute__((constructor())) followed by
Example of the vulnerable code
This issue has been resolved in DBIx::Class 1.080_07 and 1.099_01.
An input file with a sequence of code of the form __attribute__((constructor()))) followed by a sequence of the form (1,2,3) and a sequence of the form ++(1,2,3) may cause a crash in this context.
An input file with a sequence of the form __attribute__((constructor()))) followed by a sequence of the form (1,2,3) and a sequence of the form __(1,2,3) may also cause a crash.
Timeline
Published on: 08/31/2022 16:15:00 UTC
Last modified on: 09/06/2022 16:58:00 UTC