CVE-2017-10108

app("2017 JULY CPU"):
    requires(version: "ARMR/2.6")

    /***************************************************************************
        CVE-2017-10108 (2017 JULY CPU)

        CVSS 3.0 Summary:
            Base Score              | 5.3 MEDIUM
            Attack Vector           | Network
            Attack Complexity       | Low
            Privileges Required     | None
            User Interaction        | Required
            Scope                   | Unchanged
            Confidentiality Impact  | None
            Integrity Impact        | None
            Availability Impact     | Low

        Description:
            It was discovered that the implementation of the BasicAttribute
            class in OpenJDK did not limit the amount of memory allocated when
            creating object instance from a serialized form. A specially-crafted
            serialized input stream could cause JVM to consume an excessive
            amount of memory.

        Resources:
            https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-10108

        Affected Versions:
            6u151, 7u141, 8u131, JRockit R28.3.14

        Tested Versions:
            6u0 - 6u151
            7u0 - 7u141
            8u0 - 8u131

        Protection Provided:
            Functional

        Patch Version:
            1.1
    ***************************************************************************/

    patch("CVE-2017-10108 :01"):
        function("javax/naming/directory/BasicAttribute.readObject(Ljava/io/ObjectInputStream;)V",
            checksums: ["c2554c9c84"])  // 6u0 - 6u151, 7u0 - 7u141, 8u0 - 8u131
        callsite("java/util/Vector.<init>(I)V")

        code(language: java):
            public void patch(JavaFrame frame) {
                int n = frame.loadIntOperand(1);
                frame.storeIntOperand(1, Math.min(1024, n));
            }
        endcode
    endpatch

endapp