{"action":"created","issue":{"url":"https://api.github.com/repos/radare/radare2/issues/4649","repository_url":"https://api.github.com/repos/radare/radare2","labels_url":"https://api.github.com/repos/radare/radare2/issues/4649/labels{/name}","comments_url":"https://api.github.com/repos/radare/radare2/issues/4649/comments","events_url":"https://api.github.com/repos/radare/radare2/issues/4649/events","html_url":"https://github.com/radare/radare2/issues/4649","id":148794601,"number":4649,"title":"AddressSanitizer: heap-buffer-overflow READ of size 4 libr/bin/p/../format/pe/pe.c:2194","user":{"login":"revskills","id":2454862,"avatar_url":"https://avatars.githubusercontent.com/u/2454862?v=3","gravatar_id":"","url":"https://api.github.com/users/revskills","html_url":"https://github.com/revskills","followers_url":"https://api.github.com/users/revskills/followers","following_url":"https://api.github.com/users/revskills/following{/other_user}","gists_url":"https://api.github.com/users/revskills/gists{/gist_id}","starred_url":"https://api.github.com/users/revskills/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/revskills/subscriptions","organizations_url":"https://api.github.com/users/revskills/orgs","repos_url":"https://api.github.com/users/revskills/repos","events_url":"https://api.github.com/users/revskills/events{/privacy}","received_events_url":"https://api.github.com/users/revskills/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/radare/radare2/milestones/12","html_url":"https://github.com/radare/radare2/milestones/0.10.3","labels_url":"https://api.github.com/repos/radare/radare2/milestones/12/labels","id":1598497,"number":12,"title":"0.10.3","description":"","creator":{"login":"radare","id":917142,"avatar_url":"https://avatars.githubusercontent.com/u/917142?v=3","gravatar_id":"","url":"https://api.github.com/users/radare","html_url":"https://github.com/radare","followers_url":"https://api.github.com/users/radare/followers","following_url":"https://api.github.com/users/radare/following{/other_user}","gists_url":"https://api.github.com/users/radare/gists{/gist_id}","starred_url":"https://api.github.com/users/radare/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/radare/subscriptions","organizations_url":"https://api.github.com/users/radare/orgs","repos_url":"https://api.github.com/users/radare/repos","events_url":"https://api.github.com/users/radare/events{/privacy}","received_events_url":"https://api.github.com/users/radare/received_events","type":"User","site_admin":false},"open_issues":84,"closed_issues":17,"state":"open","created_at":"2016-02-22T23:03:43Z","updated_at":"2016-04-23T00:04:02Z","due_on":"2016-05-22T22:00:00Z","closed_at":null},"comments":3,"created_at":"2016-04-15T23:51:15Z","updated_at":"2016-04-23T00:06:13Z","closed_at":null,"body":"```sh\r\n==7734==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x627000014cec at pc 0x7f469b683ffb bp 0x7ffef06d4540 sp 0x7ffef06d4530\r\nREAD of size 4 at 0x627000014cec thread T0\r\n    #0 0x7f469b683ffa in Pe32_r_bin_pe_get_imports /home/fuzzer/radare2/libr/..//libr/bin/p/../format/pe/pe.c:2194\r\n    #1 0x7f469b671404 in imports /home/fuzzer/radare2/libr/..//libr/bin/p/bin_pe.c:238\r\n    #2 0x7f469b597483 in r_bin_object_set_items /home/fuzzer/radare2/libr/bin/bin.c:490\r\n    #3 0x7f469b59b446 in r_bin_object_new /home/fuzzer/radare2/libr/bin/bin.c:1011\r\n    #4 0x7f469b59beec in r_bin_file_new_from_bytes /home/fuzzer/radare2/libr/bin/bin.c:1125\r\n    #5 0x7f469b599aca in r_bin_load_io_at_offset_as_sz /home/fuzzer/radare2/libr/bin/bin.c:742\r\n    #6 0x7f469b599b57 in r_bin_load_io_at_offset_as /home/fuzzer/radare2/libr/bin/bin.c:755\r\n    #7 0x7f469b599047 in r_bin_load_io /home/fuzzer/radare2/libr/bin/bin.c:648\r\n    #8 0x7f469c458a06 in r_core_file_do_load_for_io_plugin /home/fuzzer/radare2/libr/core/file.c:388\r\n    #9 0x7f469c459680 in r_core_bin_load /home/fuzzer/radare2/libr/core/file.c:467\r\n    #10 0x564b54a050e9 in main /home/fuzzer/radare2/binr/radare2/radare2.c:659\r\n    #11 0x7f4697041a3f in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x20a3f)\r\n    #12 0x564b54a01c68 in _start (/home/fuzzer/radare2/binr/radare2/radare2+0x5c68)\r\n\r\nASAN:SIGSEGV\r\n==7734==AddressSanitizer\r\n```\r\nradare2 0.10.2 10982 @ linux-little-x86-64 git.0.10.2-38-gb14de33\r\ncommit: b14de33807a54e130a571fe06d96801cffb918f1 build: 2016-04-16\r\n\r\n\r\nfile: http://revskills.cz/r2/5d2a3cca7b950ced6bebf0957dec9222"},"comment":{"url":"https://api.github.com/repos/radare/radare2/issues/comments/213631312","html_url":"https://github.com/radare/radare2/issues/4649#issuecomment-213631312","issue_url":"https://api.github.com/repos/radare/radare2/issues/4649","id":213631312,"user":{"login":"radare","id":917142,"avatar_url":"https://avatars.githubusercontent.com/u/917142?v=3","gravatar_id":"","url":"https://api.github.com/users/radare","html_url":"https://github.com/radare","followers_url":"https://api.github.com/users/radare/followers","following_url":"https://api.github.com/users/radare/following{/other_user}","gists_url":"https://api.github.com/users/radare/gists{/gist_id}","starred_url":"https://api.github.com/users/radare/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/radare/subscriptions","organizations_url":"https://api.github.com/users/radare/orgs","repos_url":"https://api.github.com/users/radare/repos","events_url":"https://api.github.com/users/radare/events{/privacy}","received_events_url":"https://api.github.com/users/radare/received_events","type":"User","site_admin":false},"created_at":"2016-04-23T00:06:13Z","updated_at":"2016-04-23T00:06:13Z","body":"Also, according to Valgrind:\r\n```\r\n==87495==  Address 0x1021bfee4 is 21 bytes after a block of size 13,295 alloc'd\r\n==87495==    at 0x100070EBB: malloc (in /usr/local/Cellar/valgrind/3.11.0/lib/valgrind/vgpreload_memcheck-amd64-darwin.so)\r\n==87495==    by 0x10158DDB8: r_buf_set_bytes (buf.c:252)\r\n==87495==    by 0x1002B305B: Pe32_r_bin_pe_new_buf (pe.c:2595)\r\n==87495==    by 0x1002AB633: load_bytes (bin_pe.c:26)\r\n==87495==    by 0x100245C4A: r_bin_object_new (bin.c:986)\r\n==87495==    by 0x100243931: r_bin_file_new_from_bytes (bin.c:1135)\r\n==87495==    by 0x100243331: r_bin_load_io_at_offset_as_sz (bin.c:752)\r\n==87495==    by 0x100242597: r_bin_load_io_at_offset_as (bin.c:765)\r\n==87495==    by 0x1002423F1: r_bin_load_io (in /Users/pancake/prg/radare2/libr/bin/libr_bin.dylib)\r\n==87495==    by 0x1000EA1CA: r_core_file_do_load_for_io_plugin (file.c:389)\r\n==87495==    by 0x1000E93A8: r_core_bin_load (file.c:468)\r\n==87495==    by 0x100002B03: main (in /usr/local/bin/r2)\r\n```"}}