Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Potential Divide By Zero Vulnerability in Darknet Project #2632

Open
CR7-source opened this issue Mar 18, 2024 · 0 comments
Open

Potential Divide By Zero Vulnerability in Darknet Project #2632

CR7-source opened this issue Mar 18, 2024 · 0 comments

Comments

@CR7-source
Copy link

I have found a potential divide by zero vulnerability in the Darknet project .Can you please help me check it? Thank you for your effort and patience!
Below is the execution sequence of the program that may produce divide by zero vulnerability .

  1. darknet/src/parser.c forward_detection_layer function:On line 677, the count variable is defined to return value of option_find_int_quiet. On line 618, count is used as the divisor.
    image
  2. darknet/src/option_list.c option_find_int_quiet function:On line 124, the option_find_int_quiet will return the argument def if option_find return null.According to the source code on line 677, the def argument is 0 .
    image
  3. Base on the step 1 and 2,variable count can be 0 and is used to be divisor.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant