Nginx NJS v0.7.10 was discovered to contain an illegal memcpy via the function njs_vmcode_return at src/njs_vmcode.c.
cpe:2.3:a:f5:njs:0.7.10:*:*:*:*:*:*:*
2784ECC5-66FE-4666-9B7B-6DC080357DEE
OR
This is new one, different from another
Poc will be upload later
Asan
```
==20795==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x7fd4936f313f bp 0x7ffd1d582440 sp 0x7ffd1d581bf8 T0)
==20795==The signal is caused by a WRITE memory access.
==20795==Hint: address points to the zero page.
    #0 0x7fd4936f313f in memcpy (/lib/x86_64-linux-gnu/libc.so.6+0xbb13f)
    #1 0x4983f1 in __asan_memcpy (/root/njs/build/njs+0x4983f1)
    #2 0x4f7295 in njs_vmcode_return /root/njs/src/njs_vmcode.c:2690:29
    #3 0x4f8857 in njs_vmcode_await /root/njs/src/njs_vmcode.c:2843:12
    #4 0x4e425b in njs_vmcode_interpreter /root/njs/src/njs_vmcode.c:1645:15
    #5 0x53f50c in njs_function_lambda_call /root/njs/src/njs_function.c:608:11
    #6 0x5e89e6 in njs_async_function_frame_invoke /root/njs/src/njs_async.c:32:11
    #7 0x53ef25 in njs_function_frame_invoke /root/njs/src/njs_function.c:688:16
    #8 0x4e77c2 in njs_vmcode_interpreter /root/njs/src/njs_vmcode.c:1512:15
    #9 0x4de86a in njs_vm_start /root/njs/src/njs_vm.c:553:11
    #10 0x4cad73 in njs_process_script /root/njs/src/njs_shell.c:952:19
    #11 0x4cb556 in njs_process_file /root/njs/src/njs_shell.c:678:11
    #12 0x4c94be in main /root/njs/src/njs_shell.c:335:15
    #13 0x7fd493659c86 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x21c86)
    #14 0x41f1d9 in _start (/root/njs/build/njs+0x41f1d9)

AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: SEGV (/lib/x86_64-linux-gnu/libc.so.6+0xbb13f) in memcpy
```





illegal memcpy during njs_vmcode_return in src/njs_vmcode.c
This is a GitHub Issue
repo:njs
owner:nginx
Title : illegal memcpy during njs_vmcode_return in src/njs_vmcode.c
Issue date:

--- start body ---
This is new one, different from another
Poc will be upload later
Asan
```
==20795==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x7fd4936f313f bp 0x7ffd1d582440 sp 0x7ffd1d581bf8 T0)
==20795==The signal is caused by a WRITE memory access.
==20795==Hint: address points to the zero page.
    #0 0x7fd4936f313f in memcpy (/lib/x86_64-linux-gnu/libc.so.6+0xbb13f)
    #1 0x4983f1 in __asan_memcpy (/root/njs/build/njs+0x4983f1)
    #2 0x4f7295 in njs_vmcode_return /root/njs/src/njs_vmcode.c:2690:29
    #3 0x4f8857 in njs_vmcode_await /root/njs/src/njs_vmcode.c:2843:12
    #4 0x4e425b in njs_vmcode_interpreter /root/njs/src/njs_vmcode.c:1645:15
    #5 0x53f50c in njs_function_lambda_call /root/njs/src/njs_function.c:608:11
    #6 0x5e89e6 in njs_async_function_frame_invoke /root/njs/src/njs_async.c:32:11
    #7 0x53ef25 in njs_function_frame_invoke /root/njs/src/njs_function.c:688:16
    #8 0x4e77c2 in njs_vmcode_interpreter /root/njs/src/njs_vmcode.c:1512:15
    #9 0x4de86a in njs_vm_start /root/njs/src/njs_vm.c:553:11
    #10 0x4cad73 in njs_process_script /root/njs/src/njs_shell.c:952:19
    #11 0x4cb556 in njs_process_file /root/njs/src/njs_shell.c:678:11
    #12 0x4c94be in main /root/njs/src/njs_shell.c:335:15
    #13 0x7fd493659c86 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x21c86)
    #14 0x41f1d9 in _start (/root/njs/build/njs+0x41f1d9)

AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: SEGV (/lib/x86_64-linux-gnu/libc.so.6+0xbb13f) in memcpy
```





--- end body ---

comments :
--- start comments ---

--- end comments ---