add nasm_cve-2019-8343

data_augmentation/methods/ConcFuzz/crash_tags.yaml

@@ -4,4 +4,5 @@ libjpeg_cve-2018-19664: asan;0;oracle_source/wrbmp.c:145
 libjpeg_cve-2017-15232: asan;0;oracle_source/jquant1.c:536
 libxml2_cve-2017-5969: asan;0;oracle_source/valid.c:1181
 readelf_cve-2019-9077: asan;0;binutils/readelf.c:16204
+nasm_cve-2019-8343: asan;1;asm/preproc.c:3820
 mruby_hackerone-reports-185041: asan;4;error.c:290

targets/nasm_cve-2019-8343/README.md

@@ -0,0 +1,20 @@
+# CVE-2019-8343
+## reference 
+https://bugzilla.nasm.us/show_bug.cgi?id=3392556
+
+## description
+use after free in paste_tokens()
+
+## patch
+
+https://github.com/netwide-assembler/nasm/commit/f24d97500847ed02b62f04dc5d93e1b237c282de
+
+https://github.com/netwide-assembler/nasm/commit/f7dbdb2e136db99051b14403a0f29c5155bbf7d8
+
+## fixed files
+
+asm/preproc.c is the only file that is patched in above commits.
+
+## Source of PoC
+
+https://bugzilla.nasm.us/show_bug.cgi?id=3392556

targets/nasm_cve-2019-8343/build.sh

@@ -0,0 +1,23 @@
+#!/bin/bash
+
+cd $TARGET_ROOT
+
+. ${TARGET_ROOT}/config.sh
+
+git clone --branch nasm-2.14.02 --depth 1 https://github.com/netwide-assembler/nasm.git $1
+cd ${TARGET_ROOT}/$1
+sh autogen.sh
+
+TARGET_DEF_CFLAGS="${TARGET_DEF_CFLAGS-} "
+TARGET_DEF_CXXFLAGS="${TARGET_DEF_CXXFLAGS-} "
+ARGS=""
+for var in "${!TARGET_DEF_@}"; do
+  ARGS="${ARGS} ${var#TARGET_DEF_}=\"$(echo ${!var})\""
+done
+
+eval ./configure  'CFLAGS="-static -static-libasan"'
+
+eval make ${ARGS} -j$(nproc) nasm
+
+#set +e
+#./nasm -f bin ../poc -o ./tmp

targets/nasm_cve-2019-8343/config.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+set -eux
+
+export RELPATH=nasm
+export ARGS="-f bin @@ -o /tmp/test"

targets/nasm_cve-2019-8343/preinstall.sh

@@ -0,0 +1,4 @@
+#!/bin/bash
+
+apt-get update
+apt-get install -y --no-install-recommends build-essential autoconf

targets/nasm_cve-2019-8343/root_causes/locations

@@ -0,0 +1,16 @@
+preproc.c:3780
+preproc.c:3782
+preproc.c:3783
+preproc.c:3785
+preproc.c:3786
+preproc.c:3789
+preproc.c:3790
+preproc.c:3809
+preproc.c:3810
+preproc.c:3811
+preproc.c:3812
+preproc.c:3813
+preproc.c:3817
+preproc.c:3818
+preproc.c:3819
+preproc.c:3820

targets/nasm_cve-2019-8343/seeds/default

@@ -0,0 +1 @@
+r%{]%%%[ %+}%+`