From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <sourceware-bugzilla@sourceware.org>
Received: by sourceware.org (Postfix, from userid 48)
	id E10313858D38; Thu, 11 Apr 2024 12:26:53 +0000 (GMT)
DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org E10313858D38
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sourceware.org;
	s=default; t=1712838413;
	bh=3UvOOHajDbQoexPEP+NAjfhntkoDD3EYkJZGNUmP+qo=;
	h=From:To:Subject:Date:In-Reply-To:References:From;
	b=aPA09BhMFbOdyYaoLz4nFtm/VMzs5sdhS8I0TrnJLJ0Xbd9X4l4ysHLl3vzuQOTQi
	 B89oiFnR9tMSgkJvymZ7MTH/WGO8WTU2EkzaxsNH2RtdiI247oFoQ9LuDZOVbq0qWL
	 Q81h5rUmhRDTBR8pgP3knG4ovkycE9MXwQVuo+NM=
From: "N1nEmAn at proton dot me" <sourceware-bugzilla@sourceware.org>
To: gdb-prs@sourceware.org
Subject: [Bug python/31631] [gdb/python] inferior.read_memory:
 internal-error: virtual memory exhausted
Date: Thu, 11 Apr 2024 12:26:53 +0000
X-Bugzilla-Reason: CC
X-Bugzilla-Type: changed
X-Bugzilla-Watch-Reason: None
X-Bugzilla-Product: gdb
X-Bugzilla-Component: python
X-Bugzilla-Version: unknown
X-Bugzilla-Keywords: 
X-Bugzilla-Severity: normal
X-Bugzilla-Who: N1nEmAn at proton dot me
X-Bugzilla-Status: UNCONFIRMED
X-Bugzilla-Resolution: 
X-Bugzilla-Priority: P2
X-Bugzilla-Assigned-To: unassigned at sourceware dot org
X-Bugzilla-Target-Milestone: ---
X-Bugzilla-Flags: 
X-Bugzilla-Changed-Fields: 
Message-ID: <bug-31631-4717-nQZqpyZYdV@http.sourceware.org/bugzilla/>
In-Reply-To: <bug-31631-4717@http.sourceware.org/bugzilla/>
References: <bug-31631-4717@http.sourceware.org/bugzilla/>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: http://sourceware.org/bugzilla/
Auto-Submitted: auto-generated
MIME-Version: 1.0
List-Id: <gdb-prs.sourceware.org>

https://sourceware.org/bugzilla/show_bug.cgi?id=3D31631

--- Comment #11 from N1nEmAn <N1nEmAn at proton dot me> ---
(In reply to Tom de Vries from comment #10)
> (In reply to N1nEmAn from comment #9)
> > (In reply to Tom de Vries from comment #8)
> > > (In reply to N1nEmAn from comment #7)
> > > > (In reply to Tom de Vries from comment #6)
> > > > > > just run gdb and source the poc can make the memory corrupt/exh=
austed
> > > > >=20
> > > > > I'm not sure where you see memory corruption.
> > > > >=20
> > > > > I'm updating $subject to make the failure mode more clear.
> > > >=20
> > > > you are right. sorry for my unclear descreption.
> > >=20
> > > No problem, thanks for reporting this PR.
> >=20
> > Thank you for your recognition. We look forward to your team's resoluti=
on of
> > this issue.
> > Additionally, I have a question. Can we apply for a CVE for this
> > vulnerability through MITRE? Or is there another process? I didn't see
> > Sourceware on the CNA list, but I only saw Glibc.
>=20
> AFAIU, there's no vulnerability here, just a usability issue.

However, I believe that if it is present in pwndbg or any other code that c=
ould
exist in gdbinit, it could potentially lead to a local denial-of-service
attack.

--=20
You are receiving this mail because:
You are on the CC list for the bug.=