-
-
Notifications
You must be signed in to change notification settings - Fork 341
Open
Description
I stumbled upon a crash related to this line when using 17.7.2:
frida-gum/bindings/gumjs/gumquickcore.c
Lines 1945 to 1946 in 7804914
| if (core->interceptor != NULL) | |
| gum_interceptor_begin_transaction (core->interceptor->interceptor); |
I noticed that the downstream logic changed somewhat in at version 17.7.3 but I think the original root cause wasn't remediated: while the code checks if core->interceptor is NULL it doesn't check if core->interceptor->interceptor (notice the additional indirection) is a valid pointer which will cause a NULL-adjacent access in gum_interceptor_begin_transaction:
frida-gum/gum/guminterceptor.c
Lines 944 to 947 in 7804914
| gum_interceptor_transaction_begin (GumInterceptorTransaction * self) | |
| { | |
| self->level++; | |
| } |
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels