libpcap递归处理导致栈溢出问题

libpcap对过滤条件（ip，协议类型等）组织成类似树的层次结构，代码流程实现为递归处理层次结构中的每一个节点；当前fuzz测试检测到递归处理会导致栈溢出等问题。 **该问题libpcap原生开源社区已经有issue跟踪** ；

**上游开源issue跟踪** ：https://github.com/the-tcpdump-group/libpcap/issues/27
该issue在2013年提出，未解决；2019年19年oss-fuzz重新提出，libpcap作者回复需要再确认是否为问题。

**当前openEuler社区前面已经有对应的4个issue，考虑到其本质为同一个问题，建议4个issue合并处理** ；
openEuler社区libpcap原有的4个issue：
https://gitee.com/src-openeuler/libpcap/issues/I46WCS
https://gitee.com/src-openeuler/libpcap/issues/I46WCJ
https://gitee.com/src-openeuler/libpcap/issues/I46WCC
https://gitee.com/src-openeuler/libpcap/issues/I46WDI

日志：

```
#0  0x000000000057e904 in count_blocks () at /src/libpcap/optimize.c:2115
#1  0x000000000057e9d5 in count_blocks () at /src/libpcap/optimize.c:2119
#2  0x000000000057e9d5 in count_blocks () at /src/libpcap/optimize.c:2119
#3  0x000000000057e9f8 in count_blocks () at /src/libpcap/optimize.c:2119
#4  0x000000000057e9d5 in count_blocks () at /src/libpcap/optimize.c:2119
#5  0x000000000057e9f8 in count_blocks () at /src/libpcap/optimize.c:2119
#6  0x000000000057e9d5 in count_blocks () at /src/libpcap/optimize.c:2119
#7  0x000000000057e9f8 in count_blocks () at /src/libpcap/optimize.c:2119
#8  0x000000000057e9d5 in count_blocks () at /src/libpcap/optimize.c:2119
#9  0x000000000057e9f8 in count_blocks () at /src/libpcap/optimize.c:2119
...
#130903 0x000000000057e9f8 in count_blocks () at /src/libpcap/optimize.c:2119
#130904 0x000000000057e9d5 in count_blocks () at /src/libpcap/optimize.c:2119
#130905 0x0000000000572f61 in opt_init () at /src/libpcap/optimize.c:2197
#130906 0x0000000000572d39 in bpf_optimize () at /src/libpcap/optimize.c:1944
#130907 0x0000000000557f83 in pcap_compile () at /src/libpcap/gencode.c:831
#130908 0x0000000000556f83 in LLVMFuzzerTestOneInput () at ../testprogs/fuzz/fuzz_filter.c:32
#130909 0x000000000045bf54 in ExecuteCallback () at /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:599
#130910 0x00000000004476c3 in RunOneTest () at /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:323
#130911 0x000000000044d38f in FuzzerDriver () at /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:856
#130912 0x0000000000476e43 in main () at /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20
```

src-openEuler/libpcap

内容风险标识

评论 (2)