Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Infinite execution behavior in main branch #1267

Open
jvanegue opened this issue Mar 18, 2024 · 0 comments
Open

Infinite execution behavior in main branch #1267

jvanegue opened this issue Mar 18, 2024 · 0 comments

Comments

@jvanegue
Copy link

Crypto++ Issue Report

The CryptoPP allocation code is vulnerable to infinite executions in case of memory exhaustion conditions.

Submitted a PR to perform a fail safe operation (throw bad_alloc) instead of looping forever. Issue will likely affect all platforms.

On top of this fix, I recommend having more precise exception handling throughout the project instead of using the generic (Exception e) as it may inform users about the precise error causes. I did not change this in the PR.

See: #1266

Thank you,
Julien

Please do not ask questions in the bug tracker. Please ask questions on the Crypto++ Users List at http://groups.google.com/forum/#!forum/cryptopp-users.

Please do not ask questions about unsupported build systems, like Autotools, CMake, Conan and NuGet. They are other people's projects. We don't know anything about them.

Please do not ask questions at Stack Overflow. We do not patrol Stack Overflow. We will not be able to answer your question.

There is a wiki page with information on filing useful bug reports. If you have some time please visit http://www.cryptopp.com/wiki/Bug_Report on the wiki. The executive summary is:

  • State the operating system and version (Ubutnu 17 x86_64, Windows 7 Professional x64, etc)
  • State the version of the Crypto++ library (Crypto++ 7.0, Master, etc)
  • State how you built the library (Visual Studio, Makefile, distro provided, etc)
  • Show a typical command line (the output of the compiler for cryptlib.cpp)
  • Show the link command (the output of the linker for libcryptopp.so or cryptest.exe)
  • Show the exact error message you are receiving (copy and paste it); or
  • Clearly state the undesired behavior (and state the expected behavior)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant