type confusion in Sass::ParserState::ParserState(Sass::ParserState const&)

Disclosed: 2015-06-11 18:57:44 By richo To libsass
Unknown
Vulnerability Details
I haven't actually spent much time on the bug, because it doesn't look super exploitable outside of a local DoS, but the attached PoC will crash sassc in the middle of libsass from latest git, trying to deref $0x8, which appears to be the value of some tag in a tagged union. Let me know if I can help chasing this down, but I mostly wanted to just punt it over the fence.
Actions
View on HackerOne
Report Stats
  • Report ID: 66724
  • State: Closed
  • Substate: resolved
  • Upvotes: 1
Share this report