Merge pull request #383 from QiuYitai/master

alanminko · web-flow · commit cab003b277dd · 2025-03-07T23:17:19.000+07:00
Fix the NULL Pointer Dereference vulnerability in `Abc_NtkCecFraigPart`.
diff --git a/src/base/abci/abcVerify.c b/src/base/abci/abcVerify.c
@@ -324,6 +324,12 @@ void Abc_NtkCecFraigPart( Abc_Ntk_t * pNtk1, Abc_Ntk_t * pNtk2, int nSeconds, in
         }
         else if ( RetValue == 0 )
         {
+            if(!pMiterPart)
+            {
+                printf("ERROR: Failed to create cone for output %d.\n", i);
+                Status = -1; 
+                break; 
+            }
             int * pSimInfo = Abc_NtkVerifySimulatePattern( pMiterPart, pMiterPart->pModel );
             if ( pSimInfo[0] != 1 )
                 printf( "ERROR in Abc_NtkMiterProve(): Generated counter-example is invalid.\n" );

Original file line number	Diff line number	Diff line change
`@@ -324,6 +324,12 @@ void Abc_NtkCecFraigPart( Abc_Ntk_t * pNtk1, Abc_Ntk_t * pNtk2, int nSeconds, in`
`324`	`324`	`}`
`325`	`325`	`else if ( RetValue == 0 )`
`326`	`326`	`{`
	`327`	`+ if(!pMiterPart)`
	`328`	`+ {`
	`329`	`+ printf("ERROR: Failed to create cone for output %d.\n", i);`
	`330`	`+ Status = -1;`
	`331`	`+ break;`
	`332`	`+ }`
`327`	`333`	`int * pSimInfo = Abc_NtkVerifySimulatePattern( pMiterPart, pMiterPart->pModel );`
`328`	`334`	`if ( pSimInfo[0] != 1 )`
`329`	`335`	`printf( "ERROR in Abc_NtkMiterProve(): Generated counter-example is invalid.\n" );`