Skip to content
Projects
Groups
Snippets
Help
Loading...
Help
Contribute to GitLab
Sign in / Register
Toggle navigation
L
libplist
Project
Project
Details
Activity
Cycle Analytics
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Charts
Issues
1
Issues
1
List
Board
Labels
Milestones
Merge Requests
0
Merge Requests
0
CI / CD
CI / CD
Pipelines
Jobs
Schedules
Charts
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Charts
Create a new issue
Jobs
Commits
Issue Boards
Open sidebar
pwn
libplist
Commits
47d02dde
Commit
47d02dde
authored
8 years ago
by
Nikias Bassen
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
xplist: Prevent assert when parsing CF$UID dict with invalid value node
Credit to OSS-Fuzz
parent
1bf28fb6
Hide whitespace changes
Inline
Side-by-side
Showing
1 changed file
with
5 additions
and
0 deletions
+5
-0
xplist.c
src/xplist.c
+5
-0
No files found.
src/xplist.c
View file @
47d02dde
...
@@ -1178,6 +1178,11 @@ static void node_from_xml(parse_ctx ctx, plist_t *plist, uint32_t depth)
...
@@ -1178,6 +1178,11 @@ static void node_from_xml(parse_ctx ctx, plist_t *plist, uint32_t depth)
plist_t
uid
=
plist_dict_get_item
(
subnode
,
"CF$UID"
);
plist_t
uid
=
plist_dict_get_item
(
subnode
,
"CF$UID"
);
if
(
uid
)
{
if
(
uid
)
{
uint64_t
val
=
0
;
uint64_t
val
=
0
;
if
(
plist_get_node_type
(
uid
)
!=
PLIST_UINT
)
{
ctx
->
err
++
;
PLIST_XML_ERR
(
"Invalid node type for CF$UID dict entry (must be PLIST_UINT)
\n
"
);
goto
err_out
;
}
plist_get_uint_val
(
uid
,
&
val
);
plist_get_uint_val
(
uid
,
&
val
);
plist_dict_remove_item
(
subnode
,
"CF$UID"
);
plist_dict_remove_item
(
subnode
,
"CF$UID"
);
plist_data_t
nodedata
=
plist_get_data
((
node_t
*
)
subnode
);
plist_data_t
nodedata
=
plist_get_data
((
node_t
*
)
subnode
);
...
...
This diff is collapsed.
Click to expand it.
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment