sessionfuzz 检测到heap-buffer-overflow问题

**【标题描述】sessionfuzz 检测到heap-buffer-overflow问题**

**一、缺陷信息**

**内核信息：**
```
[root@openEuler testEL_sqlite_cve]# uname -a
Linux openEuler 6.6.0-39.0.0.48.oe2409.aarch64 #1 SMP Mon Sep  2 02:51:08 CST 2024 aarch64 aarch64 aarch64 GNU/Linux
```
**缺陷归属组件：**
sqlite
**缺陷归属的版本：**
![输入图片说明](https://foruda.gitee.com/images/1725366389086353604/aee6720f_5356252.png "屏幕截图")
**缺陷简述：**

**【环境信息】**
硬件信息
- 裸机场景请提供问题的硬件信息
- 虚拟机场景请提供虚拟机的XML文件或配置信息
软件信息
- OS版本及分支信息
- 内核信息
- 发现问题的组件版本信息
网络信息
- 如果有特殊组网，请提供网络拓扑信息

**【问题复现步骤】**，请描述具体的操作步骤
```
export CC=/usr/bin/clang
export CFLAGS="-DSQLITE_OMIT_LOOKASIDE -fsanitize=address -g"
export LDFLAGS=$CFLAGS
export ASAN_OPTIONS=detect_leaks=0
rpm -ivh sqlite-*.src.rpm
rpmbuild -bp /root/rpmbuild/SPECS/sqlite.spec
pushd /root/rpmbuild/BUILD/sqlite-src-*
mkdir build && cd build
../configure
make -j4 sessionfuzz
./sessionfuzz run -v ../test/sessionfuzz-data1.db
```
**【实际结果】**，请描述出问题的结果和影响
```
sessionfuzz-data1.db/c073:=================================================================
==20909==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x5120000482f8 at pc 0xaaaab08be6bc bp 0xffffde4046a0 sp 0xffffde404698
READ of size 1 at 0x5120000482f8 thread T0
    #0 0xaaaab08be6b8  (/root/rpmbuild/BUILD/sqlite-src-3420000/build/sessionfuzz+0x63e6b8) (BuildId: fae3a8441d09cd1744de199655ac29871bcc826a)
    #1 0xaaaab08c9b94  (/root/rpmbuild/BUILD/sqlite-src-3420000/build/sessionfuzz+0x649b94) (BuildId: fae3a8441d09cd1744de199655ac29871bcc826a)
    #2 0xaaaab08c5b24  (/root/rpmbuild/BUILD/sqlite-src-3420000/build/sessionfuzz+0x645b24) (BuildId: fae3a8441d09cd1744de199655ac29871bcc826a)
    #3 0xaaaab0497074  (/root/rpmbuild/BUILD/sqlite-src-3420000/build/sessionfuzz+0x217074) (BuildId: fae3a8441d09cd1744de199655ac29871bcc826a)
    #4 0xaaaab0496ee4  (/root/rpmbuild/BUILD/sqlite-src-3420000/build/sessionfuzz+0x216ee4) (BuildId: fae3a8441d09cd1744de199655ac29871bcc826a)
    #5 0xaaaab049b4a4  (/root/rpmbuild/BUILD/sqlite-src-3420000/build/sessionfuzz+0x21b4a4) (BuildId: fae3a8441d09cd1744de199655ac29871bcc826a)
    #6 0xaaaab049af20  (/root/rpmbuild/BUILD/sqlite-src-3420000/build/sessionfuzz+0x21af20) (BuildId: fae3a8441d09cd1744de199655ac29871bcc826a)
    #7 0xaaaab049d0f4  (/root/rpmbuild/BUILD/sqlite-src-3420000/build/sessionfuzz+0x21d0f4) (BuildId: fae3a8441d09cd1744de199655ac29871bcc826a)
    #8 0xaaaab04a44d8  (/root/rpmbuild/BUILD/sqlite-src-3420000/build/sessionfuzz+0x2244d8) (BuildId: fae3a8441d09cd1744de199655ac29871bcc826a)
    #9 0xffff9d91767c  (/usr/lib64/libc.so.6+0x2767c) (BuildId: f3fd4e3c1b312398523fc51f91475f9b31ef9cde)
    #10 0xffff9d917764  (/usr/lib64/libc.so.6+0x27764) (BuildId: f3fd4e3c1b312398523fc51f91475f9b31ef9cde)
    #11 0xaaaab034056c  (/root/rpmbuild/BUILD/sqlite-src-3420000/build/sessionfuzz+0xc056c) (BuildId: fae3a8441d09cd1744de199655ac29871bcc826a)

0x5120000482f8 is located 0 bytes after 312-byte region [0x5120000481c0,0x5120000482f8)
allocated by thread T0 here:
    #0 0xaaaab03e09dc  (/root/rpmbuild/BUILD/sqlite-src-3420000/build/sessionfuzz+0x1609dc) (BuildId: fae3a8441d09cd1744de199655ac29871bcc826a)
    #1 0xaaaab08a5a8c  (/root/rpmbuild/BUILD/sqlite-src-3420000/build/sessionfuzz+0x625a8c) (BuildId: fae3a8441d09cd1744de199655ac29871bcc826a)
    #2 0xaaaab04a614c  (/root/rpmbuild/BUILD/sqlite-src-3420000/build/sessionfuzz+0x22614c) (BuildId: fae3a8441d09cd1744de199655ac29871bcc826a)
    #3 0xaaaab041ff40  (/root/rpmbuild/BUILD/sqlite-src-3420000/build/sessionfuzz+0x19ff40) (BuildId: fae3a8441d09cd1744de199655ac29871bcc826a)
    #4 0xaaaab04a7828  (/root/rpmbuild/BUILD/sqlite-src-3420000/build/sessionfuzz+0x227828) (BuildId: fae3a8441d09cd1744de199655ac29871bcc826a)
    #5 0xaaaab04a7670  (/root/rpmbuild/BUILD/sqlite-src-3420000/build/sessionfuzz+0x227670) (BuildId: fae3a8441d09cd1744de199655ac29871bcc826a)
    #6 0xaaaab045b3c0  (/root/rpmbuild/BUILD/sqlite-src-3420000/build/sessionfuzz+0x1db3c0) (BuildId: fae3a8441d09cd1744de199655ac29871bcc826a)
    #7 0xaaaab053ff84  (/root/rpmbuild/BUILD/sqlite-src-3420000/build/sessionfuzz+0x2bff84) (BuildId: fae3a8441d09cd1744de199655ac29871bcc826a)
    #8 0xaaaab0542fa8  (/root/rpmbuild/BUILD/sqlite-src-3420000/build/sessionfuzz+0x2c2fa8) (BuildId: fae3a8441d09cd1744de199655ac29871bcc826a)
    #9 0xaaaab044ba58  (/root/rpmbuild/BUILD/sqlite-src-3420000/build/sessionfuzz+0x1cba58) (BuildId: fae3a8441d09cd1744de199655ac29871bcc826a)
    #10 0xaaaab044ee0c  (/root/rpmbuild/BUILD/sqlite-src-3420000/build/sessionfuzz+0x1cee0c) (BuildId: fae3a8441d09cd1744de199655ac29871bcc826a)
    #11 0xaaaab044eaa8  (/root/rpmbuild/BUILD/sqlite-src-3420000/build/sessionfuzz+0x1ceaa8) (BuildId: fae3a8441d09cd1744de199655ac29871bcc826a)
    #12 0xaaaab04a5d00  (/root/rpmbuild/BUILD/sqlite-src-3420000/build/sessionfuzz+0x225d00) (BuildId: fae3a8441d09cd1744de199655ac29871bcc826a)
    #13 0xaaaab05bbbb0  (/root/rpmbuild/BUILD/sqlite-src-3420000/build/sessionfuzz+0x33bbb0) (BuildId: fae3a8441d09cd1744de199655ac29871bcc826a)
    #14 0xaaaab04516cc  (/root/rpmbuild/BUILD/sqlite-src-3420000/build/sessionfuzz+0x1d16cc) (BuildId: fae3a8441d09cd1744de199655ac29871bcc826a)
    #15 0xaaaab0438c9c  (/root/rpmbuild/BUILD/sqlite-src-3420000/build/sessionfuzz+0x1b8c9c) (BuildId: fae3a8441d09cd1744de199655ac29871bcc826a)
    #16 0xaaaab04a41f8  (/root/rpmbuild/BUILD/sqlite-src-3420000/build/sessionfuzz+0x2241f8) (BuildId: fae3a8441d09cd1744de199655ac29871bcc826a)
    #17 0xffff9d91767c  (/usr/lib64/libc.so.6+0x2767c) (BuildId: f3fd4e3c1b312398523fc51f91475f9b31ef9cde)
    #18 0xffff9d917764  (/usr/lib64/libc.so.6+0x27764) (BuildId: f3fd4e3c1b312398523fc51f91475f9b31ef9cde)
    #19 0xaaaab034056c  (/root/rpmbuild/BUILD/sqlite-src-3420000/build/sessionfuzz+0xc056c) (BuildId: fae3a8441d09cd1744de199655ac29871bcc826a)

SUMMARY: AddressSanitizer: heap-buffer-overflow (/root/rpmbuild/BUILD/sqlite-src-3420000/build/sessionfuzz+0x63e6b8) (BuildId: fae3a8441d09cd1744de199655ac29871bcc826a) 
Shadow bytes around the buggy address:
  0x512000048000: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd
  0x512000048080: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x512000048100: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fa
  0x512000048180: fa fa fa fa fa fa fa fa 00 00 00 00 00 00 00 00
  0x512000048200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
=>0x512000048280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00[fa]
  0x512000048300: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd
  0x512000048380: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x512000048400: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fa
  0x512000048480: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd
  0x512000048500: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07 
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb
==20909==ABORTING
```
**【其他相关附件信息】**
比如系统message日志/组件日志、dump信息、图片等

**缺陷详情参考链接：**

**缺陷分析指导链接：**
https：xxx

src-openEuler/sqlite

内容风险标识

评论 (1)

src-openEuler/sqlite .gitee-modal { width: 500px !important; }

内容风险标识