Issue74

Title Out of bounds read in SQLite which is integrated as part of Orthanc
Priority feature Status resolved
Superseder Nosy List admin
Assigned To
Keywords Orthanc Core

Created on 2017-11-16.09:18:07 by admin, last changed by admin.

Files
File name Uploaded Type Edit Remove
ASAN-Output.txt admin, 2020-06-29.15:17:57 text/plain
Messages
msg335 (view) Author: admin Date: 2017-11-16.09:18:07 
[BitBucket user: amit sharma]
[BitBucket date: 2017-11-16.08:18:07]

Found it while doing some testing. Please let me know if there is anything which is required
msg336 (view) Author: admin Date: 2020-06-29.15:17:57 
[Bugzilla user: s.jodogne@gmail.com]
[Bugzilla date: 2020-06-29T13:17:57+00:00]

Created attachment 64
ASAN-Output.txt
msg337 (view) Author: admin Date: 2017-11-29.12:24:56 
[BitBucket user: Sébastien Jodogne]
[BitBucket date: 2017-11-29.11:24:56]

Hello, please could you provide the CMake command you used to combine Orthanc with Clang's Address Sanitizer?
msg338 (view) Author: admin Date: 2017-11-29.15:15:12 
[BitBucket user: Sébastien Jodogne]
[BitBucket date: 2017-11-29.14:15:12]

On my Ubuntu 16.04 box, if using the following sequence of command lines, your issue is unreproducible:

```
# cd ~/Subversion/orthanc/Build
# cmake .. -DCMAKE_BUILD_TYPE=Debug \
         -DUSE_SYSTEM_MONGOOSE=OFF \
         -DUSE_SYSTEM_GOOGLE_TEST=OFF \
         -DUSE_SYSTEM_SQLITE=OFF \
         '-DCMAKE_CXX_FLAGS=-fsanitize=address -fno-omit-frame-pointer -fno-optimize-sibling-calls' \
         '-DCMAKE_EXE_LINKER_FLAGS=-fsanitize=address' \
         '-DCMAKE_SHARED_LINKER_FLAGS=-fsanitize=address'
# make Orthanc
# ./Orthanc
```
msg339 (view) Author: admin Date: 2017-11-29.15:15:58 
[BitBucket user: Sébastien Jodogne]
[BitBucket date: 2017-11-29.14:15:58]

Putting this issue on hold, waiting for the way to reproduce the issue.
msg340 (view) Author: admin Date: 2017-11-29.15:32:50 
[BitBucket user: Sébastien Jodogne]
[BitBucket date: 2017-11-29.14:32:50]

Note: Static builds of forthcoming Orthanc 1.3.1 release will use SQLite 3.21.0 instead of SQLite 3.7.13 (that was released in 2012). This might solve your issue.

Related changeset: https://hg.orthanc-server.com/orthanc/changeset/07dd79e70b79939e42da90b70f3db4292d308dc2
msg341 (view) Author: admin Date: 2019-01-25.10:05:06 
[BitBucket user: Sébastien Jodogne]
[BitBucket date: 2019-01-25.09:05:06]

No follow-up by the reporter for more than one year, closing the issue.
History
Date User Action Args
2026-07-29 15:51:21admincreate