mruby mruby-bigint 浮点异常漏洞分析

漏洞概述 漏洞名称: Floating point exception in mruby/mruby 漏洞类型: CWE-369: Floating Point Comparison with Incorrect Operator 严重程度: Medium (5.9) 报告日期: 2022年8月28日 影响版本: mruby 3.0.0 影响范围 攻击向量: Local 攻击复杂度: Low 特权要求: None 用户交互: None 影响范围: Unchanged 完整性: Low 可用性: Low 修复方案 修复状态: Fixed 修复者: Yukihiro "Matz" Matsumoto 修复版本: 未具体说明 概念验证 (POC) 代码 ASAN 输出 ```plaintext ==147==ERROR: AddressSanitizer: SEGV on unknown address 0x5626e0776d90 (pc 0x5626e0776d90 bp 0x7ffd6e0776d90 sp 0x7ffd6e0776d90 T0) #0 0x5626e0776d90 in mrb_float /home/botton/fuzz/mruby/mruby/mrbgems/mruby-bigint/core/bigint.c:100 #1 0x5626e0776d90 in mrb_float /home/botton/fuzz/mruby/mruby/mrbgems/mruby-bigint/core/bigint.c:100 #2 0x5626e0776d90 in mrb_float /home/botton/fuzz/mruby/mruby/mrbgems/mruby-bigint/core/bigint.c:100 #3 0x5626e0776d90 in mrb_float /home/botton/fuzz/mruby/mruby/mrbgems/mruby-bigint/core/bigint.c:100 #4 0x5626e0776d90 in mrb_float /home/botton/fuzz/mruby/mruby/mrbgems/mruby-bigint/core/bigint.c:100 #5 0x5626e0776d90 in mrb_float /home/botton/fuzz/mruby/mruby/mrbgems/mruby-bigint/core/bigint.c:100 #6 0x5626e0776d90 in mrb_float /home/botton/fuzz/mruby/mruby/mrbgems/mruby-bigint/core/bigint.c:100 #7 0x5626e0776d90 in mrb_float /home/botton/fuzz/mruby/mruby/mrbgems/mruby-bigint/core/bigint.c:100 #8 0x5626e0776d90 in mrb_float /home/botton/fuzz/mruby/mruby/mrbgems/mruby-bigint/core/bigint.c:100 #9 0x5626e0776d90 in mrb_float /home/botton/fuzz/mruby/mruby/mrbgems/mruby-bigint/core/bigint.c:100 #10 0x5626e0776d90 in mrb_float /home/botton/fuzz/mruby/mruby/mrbgems/mruby-bigint/core/bigint.c:100 #11 0x5626e0776d90 in mrb_float /home/botton/fuzz/mruby/mruby/mrbgems/mruby-bigint/core/bigint.c:100 #12 0x5626e0776d90 in mrb_float /home/botton/fuzz/mruby/mruby/mrbgems/mruby-bigint/core/bigint.c:100 #13 0x5626e0776d90 in mrb_float /home/botton/fuzz/mruby/mruby/mrbgems/mruby-bigint/core/bigint.c:100 #14 0x5626e0776d90 in mrb_float /home/botton/fuzz/mruby/mruby/mrbgems/mruby-bigint/core/bigint.c:100 #15 0x5626e0776d90 in mrb_float /home/botton/fuzz/mruby/mruby/mrbgems/mruby-bigint/core/bigint.c:100 #16 0x5626e0776d90 in mrb_float /home/botton/fuzz/mruby/mruby/mrbgems/mruby-bigint/core/bigint.c:100 #17 0x5626e0776d90 in mrb_float /home/botton/fuzz/mruby/mruby/mrbgems/mruby-bigint/core/bigint.c:100 #18 0x5626e0776d90 in mrb_float /home/botton/fuzz/mruby/mruby/mrbgems/mruby-bigint/core/bigint.c:100 #19 0x5626e0776d90 in mrb_float /home/botton/fuzz/mruby/mruby/mrbgems/mruby-bigint/core/bigint.c:100 #20 0x5626e0776d90 in mrb_float /home/botton/fuzz/mruby/mruby/mrbgems/mruby-bigint/core/bigint.c:100 #21 0x5626e0776d90 in mrb_float /home/botton/fuzz/mruby/mruby/mrbgems/mruby-bigint/core/bigint.c:100 #22 0x5626e0776d90 in mrb_float /home/botton/fuzz/mruby/mruby/mrbgems/mruby-bigint/core/bigint.c:100 #23 0x5626e0776d90 in mrb_float /home/botton/fuzz/mruby/mruby/mrbgems/mruby-bigint/core/bigint.c:100 #24 0x5626e0776d90 in mrb_float /home/botton/fuzz/mruby/mruby/mrbgems/mruby-bigint/core/bigint.c:100 #25 0x5626e0776d90 in mrb_float /home/botton/fuzz/mruby/mruby/mrbgems/mruby-bigint/core/bigint.c:100 #26 0x5626e0776d90 in mrb_float /home/botton/fuzz/mruby/mruby/mrbgems/mruby-bigint/core/bigint.c:100 #27 0x5626e0776d90 in mrb_float /home/botton/fuzz/mruby/mruby/mrbgems/mruby-bigint/core/bigint.c:100 #28 0x5626e0776d90 in mrb_float /home/botton/fuzz/mruby/mruby/mrbgems/mruby-bigint/core/bigint.c:100 #29 0x5626e0776d90 in mrb_float /home/botton/fuzz/mruby/mruby/mrbgems/mruby-bigint/core/bigint.c:100 #30 0x5626e0776d90 in mrb_float /home/botton/fuzz/mruby/mruby/mrbgems/mruby-bigint/core/bigint.c:100 #31 0x5626e0776d90 in mrb_float /home/botton/fuzz/mruby/mruby/mrbgems/mruby-bigint/core/bigint.c:100 #32 0x5626e0776d90 in mrb_float /home/botton/fuzz/mruby/mruby/mrbgems/mruby-bigint/core/bigint.c:100 #33 0x5626e0776d90 in mrb_float /home/botton/fuzz/mruby/mruby/mrbgems/mruby-bigint/core/bigint.c:100 #34 0x5626e0776d90 in mrb_float /home/botton/fuzz/mruby/mruby/mrbgems/mruby-bigint/core/bigint.c:100 #35 0x5626e0776d90 in mrb_float /home/botton/fuzz/mruby/mruby/mrbgems/mruby-bigint/core/bigint.c:100 #36 0x5626e0776d90 in mrb_float /home/botton/fuzz/mruby/mruby/mrbgems/mruby-bigint/core/bigint.c:100 #37 0x5626e0776d90 in mrb_float /home/botton/fuzz/mruby/mruby/mrbgems/mruby-bigint/core/bigint.c:100 #38 0x5626e0776d90 in mrb_float /home/botton/fuzz/mruby/mruby/mrbgems/mruby-bigint/core/bigint.c:100 #39 0x5626e0776d90 in mrb_float /home/botton/fuzz/mruby/mruby/mrbgems/mruby-bigint/core/bigint.c:100 #40 0x5626e0776d90 in mrb_float /home/botton/fuzz/mruby/mruby/mrbgems/mruby-bigint/core/bigint.c:100 #41 0x5626e0776d90 in mrb_float /home/botton/fuzz/mruby/mruby/mrbgems/mruby-bigint/core/bigint.c:100 #42 0x5626e0776d90 in mrb_float /home/botton/fuzz/mruby/mruby/mrbgems/mruby-bigint/core/bigint.c:100 #43 0x5626e0776d90 in mrb_float /home/botton/fuzz/mruby/mruby/mrbgems/mruby-bigint/core/bigint.c:100 #44 0x5626e0776d90 in mrb_float /home/botton/fuzz/mruby/mruby/mrbgems/mruby-bigint/co

目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

mruby mruby-bigint 浮点异常漏洞分析

目标达成感谢每一位支持者 — 我们达成了 100% 目标！