1
0
mirror of https://github.com/systemd/systemd.git synced 2024-11-05 06:52:22 +03:00
systemd/test/fuzz-regressions/fuzz-unit-file
Zbigniew Jędrzejewski-Szmek e3c3d6761b core/load-fragment: reject overly long paths early
No need to go through the specifier_printf() if the path is already too long in
the unexpanded form (since specifiers increase the length of the string in all
practical cases).

In the oss-fuzz test case, valgrind reports:
  total heap usage: 179,044 allocs, 179,044 frees, 72,687,755,703 bytes allocated
and the original config file is ~500kb. This isn't really a security issue,
since the config file has to be trusted any way, but just a matter of
preventing accidental resource exhaustion.

https://oss-fuzz.com/v2/issue/4651449704251392/6977

While at it, fix order of arguments in the neighbouring log_syntax() call.
2018-03-21 00:46:13 +01:00
..
oss-fuzz-6884 fuzz: commit test case for oss-fuzz issue 6884 2018-03-14 15:20:02 +01:00
oss-fuzz-6885 shared/conf-parser: fix crash when specifiers cannot be resolved in config_parse_device_allow() 2018-03-14 16:50:08 +01:00
oss-fuzz-6886 basic/calendarspec: fix assert crash when year is too large in calendarspec_from_time_t() 2018-03-14 16:50:09 +01:00
oss-fuzz-6892 core/service: fix memleak of USBFunctionStrings and USBFunctionDescriptors 2018-03-17 09:01:53 +01:00
oss-fuzz-6897 fuzz: add test case for oss-fuzz #6897 and a work-around 2018-03-17 09:48:22 +01:00
oss-fuzz-6897-evverx fuzz: add test case for oss-fuzz #6897 and a work-around 2018-03-17 09:48:22 +01:00
oss-fuzz-6908 unit-file: do not allow bogus IOSchedulingClass values 2018-03-17 09:01:53 +01:00
oss-fuzz-6917 basic/calendarspec: set a limit on length of calendarspec component chains 2018-03-17 08:59:25 +01:00
oss-fuzz-6977 core/load-fragment: reject overly long paths early 2018-03-21 00:46:13 +01:00
oss-fuzz-7004 basic/calendarspec: add check for repeat values that would overflow 2018-03-21 00:46:13 +01:00