From 0949c201333ac4aa74c78163bd6754cb733a91c9 Mon Sep 17 00:00:00 2001 From: Guillaume Girol Date: Sun, 11 Feb 2024 04:42:51 +0100 Subject: [PATCH] elf: add corrupted files (#12) The files were obtained from YARA source repository. One of them has a symbol table with a very large section size that causes OOM in `object::read::ReadCache`. --- elf/yara-fuzzing/COPYING | 29 ++++++++++++++++++ ...h-7dc27920ae1cb85333e7f2735a45014488134673 | Bin 0 -> 5147 bytes ...221ebfaac3f262a1c1e280f10929f7b353c44996c8 | Bin 0 -> 7456 bytes 3 files changed, 29 insertions(+) create mode 100644 elf/yara-fuzzing/COPYING create mode 100644 elf/yara-fuzzing/crash-7dc27920ae1cb85333e7f2735a45014488134673 create mode 100644 elf/yara-fuzzing/crash-f1fd008da535b110853885221ebfaac3f262a1c1e280f10929f7b353c44996c8 diff --git a/elf/yara-fuzzing/COPYING b/elf/yara-fuzzing/COPYING new file mode 100644 index 0000000..4c9e15f --- /dev/null +++ b/elf/yara-fuzzing/COPYING @@ -0,0 +1,29 @@ +The files in this folder were copied from YARA. The following license applies +to these files: + +Copyright (c) 2007-2016. The YARA Authors. All Rights Reserved. + +Redistribution and use in source and binary forms, with or without modification, +are permitted provided that the following conditions are met: + +1. Redistributions of source code must retain the above copyright notice, this +list of conditions and the following disclaimer. + +2. Redistributions in binary form must reproduce the above copyright notice, +this list of conditions and the following disclaimer in the documentation and/or +other materials provided with the distribution. + +3. Neither the name of the copyright holder nor the names of its contributors +may be used to endorse or promote products derived from this software without +specific prior written permission. + +THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND +ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED +WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE +DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR +ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES +(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; +LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON +ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT +(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS +SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. diff --git a/elf/yara-fuzzing/crash-7dc27920ae1cb85333e7f2735a45014488134673 b/elf/yara-fuzzing/crash-7dc27920ae1cb85333e7f2735a45014488134673 new file mode 100644 index 0000000000000000000000000000000000000000..4fc2221fcf7af9f401e555e1b5c2e5a65f3c8880 GIT binary patch literal 5147 zcmb<-^>JfjVgyr+j0`Zq#9+q&;yJK5fQ29=1H%JhFc(ZXFjz2fGB_|OGbk{yF)%Q& zGB7Z})Hy&|F!~3`Fa`z&7|j7Tfq{XUfq{XAfq}t-2_j&@1Tg_bTQM*&$UubQG}IWd z+d%e#rRz&7D^j73A50!Fc@tDQpCW(0HZ-_K|+B~OH!Z#0^$W?*0t!lD-B9&F-D@Faz% zDJL^28RQ)^hJwFr@EZKmkb{ zVgp2n29h|kIUdb#I6S&pd3h8VJX#Nwu)eTnU|{fQKEiPrqVK;c6ORJJe^nM91qOb3 z2ZsNuAbti&^5uj7|NsA2{l%@okO6YS%L`!sClDWG^~(eQ|Nl39>)ClR&ZF~@NAr^p z0U@5p4;)~1VDLD8FaS&)*JX8Jc(MKe|Nmdo_~l&~7=ffcXdNkWg za4Ik`l*qxIAQHM?fiHo4orb8_-Q8AzJh+5lRItNi=_zlMQ`cZRs}IIRtPXk^RRPFU}P5n ziGxaifq(!1Yk?F%F-RQ5L{-ngpaQMu7ySMIA6$g-3Aph|c=2Js4xY|r7$ostoZl;e=11ciBF)P$(2u{kJ*(^ zp_j##Posy`gU_Ii&4bUPncbJqA&1YxkxFfcGAfB`5YFn|gzkY12Epp1)Fs0o1N7eER)FdJkJ6C+qFNZTkL z4S~@R7!3h%2>gTqFq@vl3nBqM-85>~&<=rpv~WHX8G{xc)CZvc7`Pn+?s7s{l#GLb zf(q20LZ%@t1Z!}I0c0OY4uT=}kvhr%>%_rmLcMA1om@oc7S`E?wurzTJx~X95Os2k zQ`2)(^Gb>#!3HH^oiAu-m-z#g6IIZ_#lvWNSrW$JG_SGH0$t|fb4-` qkiEzl)KFGnV1RUvp%Tl2OBfkGfI65^0R{%}cpZWV9)?5WLYM#`g7AU> literal 0 HcmV?d00001 diff --git a/elf/yara-fuzzing/crash-f1fd008da535b110853885221ebfaac3f262a1c1e280f10929f7b353c44996c8 b/elf/yara-fuzzing/crash-f1fd008da535b110853885221ebfaac3f262a1c1e280f10929f7b353c44996c8 new file mode 100644 index 0000000000000000000000000000000000000000..72cde9ac47cbcf911472fc7bf65536710dd1cb57 GIT binary patch literal 7456 zcmb<-^>JflWMqH=W(H;k5Kn=Hfx(1J+Ffgz%FfcGPFffELBCs$60|N+y_P^m{V0a@3 z!3K;B3?_^WV0%IGObiSRKlm6Je#k-a2L=WP5C*vmWCsXmFfuT}unPkN0|%VR3=9l0NPLibJtRIzJ{yS-lCMYOTQe{)OkjnCrw{`l12+Q$gAW_T|AL^%%gIbi z28D?kL%gSdd~r!iW?p=0acT-fL1{@bLwtO4MPhtfW?o`WW>qRfd^|{bd~r!)QAvDm zVrCvgyl04Sd`fCjYIe1cR6WM=Y$QvFN@ z29OUKisdso85o!t7K0=iAZZvBPaotM7(nzFc?d0`0HI&VGcd3*GBCUW(M${sA3!t< z1H%sx&Bnm+2Sl?oFz_faFt9T-FbIHXRtARP<~JNKW-~A_G#<8=VPNQP{_y|*|JDN~ ztS{^s7#Nz5a6}(w_`eyHD*rDA*$Z;c|HV8E3=A0{=F12F|NsBL803o#ko3z7VE&u` z|No~=_`eurSlR@`w{e{ho1c6L2nl)tN-vFvFGw>m^fntj`~N?nxB0@;|NjF5!~Spn z^8f$;7wiB3|No_1M&)qY1QGt&d9*fc&Hm>NS6!)14C~UC`oFbX#T-gCf?oj z0^$YU(9WmLZ$twBUuZreaPsrv&TqYY)IpAZaUJB}L*CL1457VH13<=fJ`L79aqtII z^Bb1V!v|l>Gv2uPqeP^8(jSm{mrA&r-*5y3{=d|GM4&tN&q;)Np`A~IUxfev|G)9@ zcPR#j<~J-2yFunLl&W_(gMy;z& zdtnZC-)bq4&%XTo|G%4~^<*jMOPBxu|M!-tF?3J*0ddh=hz|q6ZaVo=<^TWx-6AT7 zdwo<`nxB05U-$>)vcMM_3=9mcF<_VR^iBwP_WyrS=iwJ-5NGTFg-CDekI3lQ-o!tL zyIE8YhlYm*zi9sl@{c-1S9gwzLht4e|Nj4far*E7|Gmv`{{8>2dFQzPau;J&5CdZk2ct9(3rh#6o?&2M00q0o-~ay& zKnnOc-1vCB__<41Dj4jgthJ0(lt3xk0c6MD|NlX3kTQ^3ko^n({r?Xt>ls{l7#Z9J zSeZ&0T=nM!NY5ArZFI39L9>deE!0?x}F3=9k_{{8?Q+9F9l%SRiG^3kC*;HUIwq2bJw0<3{ml2#kinXb6mkz-S1Jh5&U#AOO^9 z0%2$$3e-0OwTAaFGcfRi+6!z943g0Hx-_&;2I?Py+U=k=2dEA3_22*eHH-`lAY%%c zAZ?oqj0_B13=9nG85qF*9Z;J?6zX(PyNE#n)Ej`*_n>x-AOiz~IH=xdW?%rZQ21~tZi|No!Qz`(%q@BjaN6J`d6|NsBzgWUV!|NndiW(I~||NrNM+yk|S zBns3&gJ}Tup<(QA%nS@{P(wj|6L)84D+LXg)TGSBJOwj7V?6_1Lkmp^OToy%(A>b( z&T!iThUKy5h)9~?pqpfH8-Ar1hADTEISX$A&RSVQ=r9y0?2 zC=4Kcb`Zq?3L_AM8QjBSU;u?Fgb(T+Gcc@ySi`^!jwuEPP@F^LK|NFkh6iwYP>Nt+ z5P&#?ff<}K7#Kj~ArSR^Ad0~R;tU3627WN#1I`Dd5|WZ&@x;s^29^Nz89@wYa7toe0HrYqAJk7_U=RUy z&cWjepcKu(AOq)vQZz^<1T!;8gZr`&9;l!G@joa8VD>XIh=TJ(0W>_A82A`Kd1C_- zA3R0?i6#b+JZP*1WFIKKGBQXp1cSzBp#EWG5MiidU|;~}MFvp5;A3cm<~fiX7#V~a zmVy{i%);>TKgb*?mjT4z1R7(2L^}f`gAfC#|A6dXm|74GQhx@?e$YtNUC{Uu+&y9p z&yef~$^Qh6gFxd8ltXzy4uFOqBZCBk5+ehH0UOBepnS{6U<8r}Sq6;;KSl1SeMV7S1_zyRvsfW~lc zfcynA2t2+a#jqIE4}-=(NM4AEfdQ2MK|-K09!Vx-|4A{ZGNFzMX)!S{oI&!R1Efd* zIS-tSLy+`?+?#+V&%=bsze1oAH@T>!xTG{KO)r@tKHkeYDBj02I3zxv0WnS#Uy>W2 z3>ql{4KbzU$EWAyCne^@rS{aoVX zp>Bq;QFNv-#JfcLIr@4!GsGjC2_6w+h>v&o3ypX6h=-Ww;S$6U@9yL8HNeB>;r}IA->MA_yLVMVjVPO&?~OYElEsb z&?_z}g3uW-R%TvFYEc1$US57ls-B~hr*27NI+T~5SE`p(nwgWLo0-C(2jXQU7H2T% zrBvn>SLQuOuOzji zgh4MYGcS`tuP7fB2@HCv8PG(Uky3=b#W-5WFDxk0m2}4&|(N|9!RYpv<(MR2Wo?W z@B-)<7RYTNHJ}HtvN1cX8DKagD@3{nfC;}{@qH;{RtHVX)YYIvBvAaM`| zjjMy&dLTBaEd#=!F)L8D05S_?FUUMl-N^~AHz92tP&)_IZiJZ!QU_{3HZw3VfYdob z+nJ#D56Imhb)XgkOdV(p4rD&a9#ESIgh62svI~Sk>Ogcmw9O1s2Wl&UFvxu%IS>Y! z4N^M^Ngb#S1;!u+Pz-V#hzT0DhS>{hTY)gB9s$XLFvvU*y%5PfP@4;cLE#6I17VPz zAbL4e9Vq-jbrA?-QwNG8ki8&v$n!rSGe8(--d-g0Ky5b={sU3~#V~cp85kHqEkaQ9 z5jf?gNGOG$ivtZN?Y;3=E+72dM#JkU9{4i=+-*2@5bVpobqw-8Uq4pf;w60AvmW zWEKd6)PQJESb^*ZxewG9lo3D;7f>94)PbfRL2OuB0;y92NkB134u(N-1{G#-5ny0w zU}0d8Wnf^?hxXM#X$F+$L3YB_9r^qJePL_|0Ezni Ax&QzG literal 0 HcmV?d00001