#878734 advancecomp: NULL pointer dereference when running advmng with -l option

Package:
advancecomp
Source:
advancecomp
Description:
collection of recompression utilities
Submitter:
Joonun Jang
Date:
2017-10-16 10:21:05 UTC
Severity:
normal
#878734#5
Date:
2017-10-16 10:18:48 UTC
From:
To:
Dear Maintainer,

Running 'advmng -l' with the attached file raises a NULL pointer
dereference, which may allow a denial-of-service attack of a malicious
attacker.

I expected the program to terminate without segfault, but the program
crashes as follow.
Program received signal SIGSEGV, Segmentation fault.
0x000055555556037f in ?? ()
(gdb) x/i $rip
=> 0x55555556037f:  movzwl 0x0(%rbp),%r13d
(gdb) i r rbp
rbp            0x0  0x0
-----------------------------

The bug was found with a fuzzer developed by 'SoftSec' group at KAIST.