Comments (1)
UAF 1
ecall_closedb called twice, lead to UAF
#0 ReportGenericError (pc=140737295875590, bp=140737488342096, sp=140737488341976, addr=4961980, is_write=false, access_size=4, fatal=true, msg=0x2dfd59 "Enclave out of bound") at /mnt/hdd/chenliheng/SGXSan/SGXSanRT/SGXSanRTApp/SGXSanRTApp.cpp:516
#1 0x0000000000344f47 in __asan_load4 (addr=4961980, toCmp=false, funcName=0x7ffff47f35e0 <__unnamed_233> "sqlite3SafetyCheckSickOrOk") at /mnt/hdd/chenliheng/SGXSan/SGXSanRT/SGXSanRTApp/PoisonCheck.cpp:90
#2 0x00007ffff486fe06 in sqlite3SafetyCheckSickOrOk (db=0x4bb658) at Enclave/sqlite3.c:28916
#3 0x00007ffff486c96d in sqlite3Close (db=0x4bb658, forceZombie=0) at Enclave/sqlite3.c:141527
#4 0x00007ffff486c8e7 in sqlite3_close (db=0x4bb658) at Enclave/sqlite3.c:141580
#5 0x00007ffff482dedc in ecall_closedb () at Enclave/Enclave.cpp:54
#6 0x00007ffff4826e6f in sgx_ecall_closedb (pms=0x0) at Enclave/Enclave_t.c:281
UAF 2
ecall_execute_sql after ecall_closedb
#0 ReportGenericError (pc=140737295806423, bp=140737488341328, sp=140737488341208, addr=4798172, is_write=false, access_size=4, fatal=true, msg=0x2dfd59 "Enclave out of bound") at /mnt/hdd/chenliheng/SGXSan/SGXSanRT/SGXSanRTApp/SGXSanRTApp.cpp:516
#1 0x0000000000344f47 in __asan_load4 (addr=4798172, toCmp=false, funcName=0x7ffff47f21c0 <__unnamed_180> "sqlite3SafetyCheckOk") at /mnt/hdd/chenliheng/SGXSan/SGXSanRT/SGXSanRTApp/PoisonCheck.cpp:90
#2 0x00007ffff485efd7 in sqlite3SafetyCheckOk (db=0x493678) at Enclave/sqlite3.c:28903
#3 0x00007ffff485de9b in sqlite3_exec (db=0x493678, zSql=0x499f80 "", xCallback=0x7ffff482d7c0 <callback(void*, int, char**, char**)>, pArg=0x0, pzErrMsg=0x7fffffffcc40) at Enclave/sqlite3.c:111147
#4 0x00007ffff482d708 in ecall_execute_sql (sql=0x499f80 "") at Enclave/Enclave.cpp:44
#5 0x00007ffff4826d3c in sgx_ecall_execute_sql (pms=0x7fffffffce08) at Enclave/Enclave_t.c:270
from sgx_sqlite.
Related Issues (9)
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from sgx_sqlite.