Buffer overflow from input anywhere in machine, hangs machine.

[justinmarma]

Below is a linked image of the POC, system is hanged

[amanuel2]

That is because the get_opt function uses str_t as the type of the sting provided which has a maximum buffer of 200. @Fortunate-MAN will fix this as soon as i add memory manager and get it to char* .

Note for @Fortunate-MAN :

I know in some places i do for(int i=0; i<200; i++) str_t_instance[i]=0; to clear out the buffer , dont forget to change those to fix this problem after i get memory manager working.

[double-fault]

@justinmarma Can you give the exact ways how to reproduce this problem on another computer? I would need information like which OS you are running, are you running the latest build or v0.0.1, what commands are you doing before you run the OS or does it happen if you just start the OS?

Also, as per the image you have given, it looks like you are running an old version, so please get the Nightly Build from bintray or compile from source and run it.

[amanuel2]

@Fortunate-MAN v0.0.1 or v0.0.2 .. i released the second version yesterday.

[justinmarma]

@Fortunate-MAN The bug exists in v0.0.2 too. I'm running the OS in VirtualBox and I showed above that it happens when input exceeds buffer len..

The buffer length is 200 and the BOF happens around 56 extra bytes relative to the end of the buffer.

This can be reproduced by creating a script or program to produce 200 chars and add the variable length to it, then pasting it into the console if you use VBox.

[double-fault]

@justinmarma no repro on this one either. I'm running QEmu on Ubuntu 14.04 and nothing much happened even after I entered way more than 200 chars. @amanuel2 can you repro this issue?