[Security] UAF and SEGV on NanoMQ 0.22.4

[roman-kraus-fokus]

Describe the bug
We have found a heap-use-after-free on NanoMQ 0.22.4. The input we use for that sometimes triggers a segmentation fault instead.

To Reproduce
We have a proof of concept available. As it endangers the security of NanoMQ, we would prefer sharing it privately with you. Do you have a channel for us to do so?

Environment Details

• NanoMQ version 0.22.4
• Operating system: Ubuntu 20.04
• Compiler: Clang 11

[JaylinYu]

There is a known bug in newly added prefix/suffix feature, I guess that's what you just hit.

You can share any security issue Via Our slack channel or PM me there.

Join me on Slack -- it’s a faster, simpler way to work. Sign up here, from any device: https://join.slack.com/t/emqx/shared_invite/zt-2ntpicu1z-i1eBr6T7WwdMAD62TxqYwA

[JaylinYu]

let's continue session on slack. or plz post your poc data here.
thx

[roman-kraus-fokus]

Sure, we made some final checks and will contact you shortly on Slack.