Bug #13242: SIGSEGV in rb_bigzero_p()

• Status: Closed
• Assignee: -
• Target version: -
• Backport: 2.2: DONE, 2.3: DONE, 2.4: DONE

[fumfel (Kamil Frankowicz)]

After some fuzz testing I found a crashing test case.

Git HEAD: fbd5cda6aad6db01bbca3d893a9970314a1bd52c

To reproduce: miniruby ruby_rb_bigzero_p.rb

[nobu (Nobuyoshi Nakada)]

• Status changed from Open to Closed

Applied in changeset r57688.

---

rational.c: infinity in power

• rational.c (nurat_expt): return Infinity due to overflow.
  [ruby-core:79686] [Bug #13242]:

[nobu (Nobuyoshi Nakada)]

• Backport changed from 2.2: UNKNOWN, 2.3: UNKNOWN, 2.4: UNKNOWN to 2.2: REQUIRED, 2.3: REQUIRED, 2.4: REQUIRED

2.3 and earlier hung up before SEGV.

[fumfel (Kamil Frankowicz)]

This is CVE-2017-6212.

[nobu (Nobuyoshi Nakada)]

This is not vulnerability.

[fumfel (Kamil Frankowicz)]

Nobuyoshi Nakada wrote:

This is not vulnerability.

Right, I'm too fast ;-)

[naruse (Yui NARUSE)]

• Backport changed from 2.2: REQUIRED, 2.3: REQUIRED, 2.4: REQUIRED to 2.2: REQUIRED, 2.3: REQUIRED, 2.4: DONE

ruby_2_4 r57911 merged revision(s) 57688,57689.

[nagachika (Tomoyuki Chikanaga)]

• Backport changed from 2.2: REQUIRED, 2.3: REQUIRED, 2.4: DONE to 2.2: REQUIRED, 2.3: DONE, 2.4: DONE

ruby_2_3 r58060 merged revision(s) 57688,57689.

[usa (Usaku NAKAMURA)]

• Backport changed from 2.2: REQUIRED, 2.3: DONE, 2.4: DONE to 2.2: DONE, 2.3: DONE, 2.4: DONE

ruby_2_2 r58117 merged revision(s) 57688,57689.