mem_size overflow in sdsMakeRoomFor

```
==2230361==ERROR: AddressSanitizer: requested allocation size 0x7ff7b3efff49 (0x7ff7b3f00f50 after adjustments for alignment, red zones etc.) exceeds maximum supported size of 0x10000000000 (thread T0)
    #0 0x52080d in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:145:3
    #1 0x559388 in hi_malloc /src/hiredis/./alloc.h:58:12
    #2 0x559bd8 in sdsMakeRoomFor /src/hiredis/sds.c:229:17
    #3 0x55b2a1 in sdscatlen /src/hiredis/sds.c:381:9
    #4 0x552111 in redisvFormatCommand /src/hiredis/hiredis.c
    #5 0x55373e in redisFormatCommand /src/hiredis/hiredis.c:554:11
    #6 0x551379 in LLVMFuzzerTestOneInput /src/hiredis/format_command_fuzzer.c:51:5
    #7 0x459ae3 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:599:15
    #8 0x445252 in fuzzer::RunOneTest(fuzzer::Fuzzer*, char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:323:6
    #9 0x44aef6 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:856:9
    #10 0x474402 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10
    #11 0x7ff7b7134b26 in __libc_start_main (/lib64/libc.so.6+0x25b26)

DEDUP_TOKEN: malloc--hi_malloc--sdsMakeRoomFor
==2230361==HINT: if you don't care about these errors you may set allocator_may_return_null=1
SUMMARY: AddressSanitizer: allocation-size-too-big /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:145:3 in malloc
==2230361==ABORTING
```

src-openEuler/hiredis
关闭

内容风险标识

评论 (5)

src-openEuler/hiredis关闭 .gitee-modal { width: 500px !important; }

内容风险标识