[Parted-maintainers] Bug#1000490: parted: heap-overflow after getline

[wangyangbo]

Package: parted
Version: 3.4-1
Severity: normal

Dear Maintainer,

echo 'int main(){
  ped_malloc(10);
  return 0;
}' >a.c
gcc a.c -lparted -fsanitize=address
./a.out running by no-root,

Will see heap-buffer-overflow from ped_disk_gpt_init.
I have fixed it, will submit after this report.


-- System Information:
Debian Release: 11.1
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500,
'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 5.10.0-9-amd64 (SMP w/2 CPU threads)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not
set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages parted depends on:
ii  libc6         2.31-13+deb11u2
ii  libparted2    3.4-1
ii  libreadline8  8.1-1
ii  libtinfo6     6.2+20201114-2

parted recommends no packages.

Versions of packages parted suggests:
pn  parted-doc  <none>