-
Recent Posts
Recent Comments
- strongcourage on Why I stopped fuzzing research
- Bob Friesenhahn on Why I stopped fuzzing research
- #gentoo dev: Why I stopped fuzzing research https://blogs.gentoo.or… | Dr. Roy Schestowitz (罗伊) on Why I stopped fuzzing research
- Ulya on Why I stopped fuzzing research
- ago on Install Gentoo in less than one minute
Archives
- July 2020
- April 2020
- March 2019
- October 2017
- September 2017
- August 2017
- July 2017
- June 2017
- May 2017
- April 2017
- March 2017
- February 2017
- January 2017
- December 2016
- November 2016
- October 2016
- September 2016
- August 2016
- July 2016
- February 2016
- July 2015
- August 2013
- June 2013
- May 2013
- January 2013
- December 2012
- November 2012
- October 2012
- August 2012
- July 2012
- June 2012
Categories
Meta
Monthly Archives: November 2016
libming: listmp3: divide-by-zero in printMP3Headers (listmp3.c)
Description: libming is a Flash (SWF) output library. It can be used from PHP, Perl, Ruby, Python, C, C++, Java, and probably more on the way.. A fuzzing revealed a divide by zero in listmp3. The bug does not reside … Continue reading
Posted in advisories, security
Leave a comment
libtiff: memory allocation failure in _TIFFCheckRealloc (tif_aux.c)
Description: libtiff is a software that provides support for the Tag Image File Format (TIFF). During the fuzz of imagemagick, I noticed a memory allocation failure in libtiff. The issue was first reported to the imagemagick’s developers which confirmed that … Continue reading
Posted in advisories, security
Leave a comment
libming: listmp3: global-buffer-overflow in printMP3Headers (listmp3.c)
Description: libming is a Flash (SWF) output library. It can be used from PHP, Perl, Ruby, Python, C, C++, Java, and probably more on the way.. A fuzzing revealed a global buffer overflow in listmp3. The bug does not reside … Continue reading
Posted in advisories, security
Leave a comment
libdwarf: memory allocation failure in do_decompress_zlib (dwarf_init_finish.c)
Description: libdwarf is a library to consume and produce DWARF debug information. A fuzz on an updated version revealed a memory allocation failure. The complete ASan output: # dwarfdump $FILE ==27994==WARNING: AddressSanitizer failed to allocate 0x62696c2f7273752f bytes ==27994==AddressSanitizer’s allocator is … Continue reading
Posted in advisories, security
Leave a comment
libdwarf: heap-based buffer overflow in dwarf_get_aranges_list (dwarf_arange.c)
Description: libdwarf is a library to consume and produce DWARF debug information. A fuzz on an updated version revealed a buffer overflow. The complete ASan output: # dwarfdump $FILE ==27460==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x60600000eff4 at pc 0x00000047349b bp 0x7ffd9feadaf0 … Continue reading
Posted in advisories, security
Leave a comment
libdwarf: heap-based buffer overflow in get_attr_value (print_die.c)
Description: libdwarf is a library to consume and produce DWARF debug information. A fuzz on an updated version revealed a buffer overflow. The complete ASan output: # dwarfdump $FILE ==27395==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x61300000de1c at pc 0x000000528cd3 bp 0x7ffd980a63b0 … Continue reading
Posted in advisories, security
Leave a comment
libdwarf: heap-based buffer overflow in _dwarf_skim_forms (dwarf_macro5.c)
Description: libdwarf is a library to consume and produce DWARF debug information. A fuzz on an updated version revealed a buffer overflow. The complete ASan output: # dwarfdump $FILE ==2437==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x62000000fe5b at pc 0x000000462c7c bp 0x7ffea0d4b690 … Continue reading
Posted in advisories, security
Leave a comment
jasper: use after free in jas_realloc (jas_malloc.c)
Description: jasper is an open-source initiative to provide a free software-based reference implementation of the codec specified in the JPEG-2000 Part-1 standard. A crafted image, maybe posted in the past as testcase for another bug, causes in the 1.900.18 version … Continue reading
Posted in advisories, security
Leave a comment
elfutils: memory allocation failure in allocate_elf (common.h)
Description: elfutils is a set of libraries/utilities to handle ELF objects (drop in replacement for libelf). During the fuzz of libdwarf, I noticed a memory allocation failure which involves elfutils. Actually there is a proposed patch on the elfutils mailing … Continue reading
Posted in advisories, security
Leave a comment
elfutils: memory allocation failure in __libelf_set_rawdata_wrlock (elf_getdata.c)
Description: elfutils is a set of libraries/utilities to handle ELF objects (drop in replacement for libelf). During the fuzz of libdwarf, I noticed a memory allocation failure which involves elfutils. To have a double-check, the bug was first reported to … Continue reading
Posted in advisories, security
Leave a comment