{"action":"opened","issue":{"url":"https://api.github.com/repos/radare/radare2/issues/2853","labels_url":"https://api.github.com/repos/radare/radare2/issues/2853/labels{/name}","comments_url":"https://api.github.com/repos/radare/radare2/issues/2853/comments","events_url":"https://api.github.com/repos/radare/radare2/issues/2853/events","html_url":"https://github.com/radare/radare2/issues/2853","id":91590560,"number":2853,"title":"Out of bounds heap read in perform_disassembly","user":{"login":"hannob","id":990588,"avatar_url":"https://avatars.githubusercontent.com/u/990588?v=3","gravatar_id":"","url":"https://api.github.com/users/hannob","html_url":"https://github.com/hannob","followers_url":"https://api.github.com/users/hannob/followers","following_url":"https://api.github.com/users/hannob/following{/other_user}","gists_url":"https://api.github.com/users/hannob/gists{/gist_id}","starred_url":"https://api.github.com/users/hannob/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/hannob/subscriptions","organizations_url":"https://api.github.com/users/hannob/orgs","repos_url":"https://api.github.com/users/hannob/repos","events_url":"https://api.github.com/users/hannob/events{/privacy}","received_events_url":"https://api.github.com/users/hannob/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-06-28T11:48:27Z","updated_at":"2015-06-28T11:48:27Z","closed_at":null,"body":"Script:\r\nhttps://crashes.fuzzing-project.org/radare2-script-oob-heap-read-perform_disassembly\r\nContains string \"pD@!\"\r\n\r\nAddress Sanitizer:\r\n```\r\n==6296==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x611000009ec0 at pc 0x7fc287c8b206 bp 0x7ffd45dc7080 sp 0x7ffd45dc7070\r\nREAD of size 1 at 0x611000009ec0 thread T0\r\n    #0 0x7fc287c8b205 in pdi /f/radare2/radare2/libr/core/cmd_print.c:959\r\n    #1 0x7fc287cca171 in cmd_print /f/radare2/radare2/libr/core/cmd_print.c:1821\r\n    #2 0x7fc287d34a0d in r_core_cmd_subst_i /f/radare2/radare2/libr/core/cmd.c:1595\r\n    #3 0x7fc287c97499 in r_core_cmd_subst /f/radare2/radare2/libr/core/cmd.c:1081\r\n    #4 0x7fc287c98633 in r_core_cmd /f/radare2/radare2/libr/core/cmd.c:1943\r\n    #5 0x7fc287c9b4ec in r_core_cmd_lines /f/radare2/radare2/libr/core/cmd.c:1994\r\n    #6 0x7fc287c9b6f4 in r_core_cmd_file /f/radare2/radare2/libr/core/cmd.c:2006\r\n    #7 0x7fc287c9e496 in r_core_run_script /f/radare2/radare2/libr/core/cmd.c:373\r\n    #8 0x4054e3 in main /f/radare2/radare2/binr/radare2/radare2.c:729\r\n    #9 0x7fc2821f9f9f in __libc_start_main (/lib64/libc.so.6+0x1ff9f)\r\n    #10 0x409fae (/mnt/ram/r2/radare2+0x409fae)\r\n\r\n0x611000009ec0 is located 0 bytes to the right of 256-byte region [0x611000009dc0,0x611000009ec0)\r\nallocated by thread T0 here:\r\n    #0 0x7fc2883c66f7 in malloc (/usr/lib/gcc/x86_64-pc-linux-gnu/4.9.2/libasan.so.1+0x576f7)\r\n    #1 0x7fc287c44db9 in r_core_init /f/radare2/radare2/libr/core/core.c:859\r\n\r\nSUMMARY: AddressSanitizer: heap-buffer-overflow /f/radare2/radare2/libr/core/cmd_print.c:959 pdi\r\nShadow bytes around the buggy address:\r\n  0x0c227fff9380: fd fd fa fa fa fa fa fa fa fa fa fa fa fa fa fa\r\n  0x0c227fff9390: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd\r\n  0x0c227fff93a0: fd fd fd fd fd fd fd fd fd fd fa fa fa fa fa fa\r\n  0x0c227fff93b0: fa fa fa fa fa fa fa fa 00 00 00 00 00 00 00 00\r\n  0x0c227fff93c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00\r\n=>0x0c227fff93d0: 00 00 00 00 00 00 00 00[fa]fa fa fa fa fa fa fa\r\n  0x0c227fff93e0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd\r\n  0x0c227fff93f0: fd fd fd fd fd fd fd fd fd fd fa fa fa fa fa fa\r\n  0x0c227fff9400: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\r\n  0x0c227fff9410: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\r\n  0x0c227fff9420: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\r\nShadow byte legend (one shadow byte represents 8 application bytes):\r\n  Addressable:           00\r\n  Partially addressable: 01 02 03 04 05 06 07 \r\n  Heap left redzone:       fa\r\n  Heap right redzone:      fb\r\n  Freed heap region:       fd\r\n  Stack left redzone:      f1\r\n  Stack mid redzone:       f2\r\n  Stack right redzone:     f3\r\n  Stack partial redzone:   f4\r\n  Stack after return:      f5\r\n  Stack use after scope:   f8\r\n  Global redzone:          f9\r\n  Global init order:       f6\r\n  Poisoned by user:        f7\r\n  Contiguous container OOB:fc\r\n  ASan internal:           fe\r\n==6296==ABORTING\r\n"}}