-
Recent Posts
Recent Comments
- strongcourage on Why I stopped fuzzing research
- Bob Friesenhahn on Why I stopped fuzzing research
- #gentoo dev: Why I stopped fuzzing research https://blogs.gentoo.or… | Dr. Roy Schestowitz (罗伊) on Why I stopped fuzzing research
- Ulya on Why I stopped fuzzing research
- ago on Install Gentoo in less than one minute
Archives
- July 2020
- April 2020
- March 2019
- October 2017
- September 2017
- August 2017
- July 2017
- June 2017
- May 2017
- April 2017
- March 2017
- February 2017
- January 2017
- December 2016
- November 2016
- October 2016
- September 2016
- August 2016
- July 2016
- February 2016
- July 2015
- August 2013
- June 2013
- May 2013
- January 2013
- December 2012
- November 2012
- October 2012
- August 2012
- July 2012
- June 2012
Categories
Meta
Monthly Archives: February 2017
audiofile: global buffer overflow in decodeSample (IMA.cpp)
Description: audiofile is a C-based library for reading and writing audio files in many common formats. A fuzz on it discovered a global overflow. The complete ASan output: # sfconvert @@ out.mp3 format aiff ==1779==ERROR: AddressSanitizer: global-buffer-overflow on address 0x7f0add7e6a7a … Continue reading
Posted in advisories, security
1 Comment
audiofile: heap-based buffer overflow in readValue (FileHandle.cpp)
Description: audiofile is a C-based library for reading and writing audio files in many common formats. A fuzz with a wav file as input produced an heap overflow. The complete ASan output: # sfinfo $FILE ==6051==ERROR: AddressSanitizer: heap-buffer-overflow on address … Continue reading
Posted in advisories, security
Leave a comment
audiofile: heap-based buffer overflow in MSADPCM::initializeCoefficients (MSADPCM.cpp)
Description: audiofile is a C-based library for reading and writing audio files in many common formats. A fuzz with a wav file as input produced an heap overflow. The complete ASan output: # sfinfo $FILE ==6096==ERROR: AddressSanitizer: heap-buffer-overflow on address … Continue reading
Posted in advisories, security
Leave a comment
mupdf: mujstest: stack-based buffer overflow in main (jstest_main.c)
Description: Mujstest, which is part of mupdf is a scriptable tester for mupdf + js. A crafted image posted early for another issue, causes a stack overflow. The complete ASan output: # mujstest $FILE ==32127==ERROR: AddressSanitizer: stack-buffer-overflow on address 0x7fff29560b00 … Continue reading
Posted in advisories, security
Leave a comment
mupdf: use-after-free in fz_subsample_pixmap (pixmap.c)
Description: mupdf is a lightweight PDF viewer and toolkit written in portable C. A fuzzing through mutool revealed a use-after-free. It seems that a fix for the recent heap overflow in fz_subsample_pixmap fixes this issue too. The complete ASan output: … Continue reading
Posted in advisories, security
Leave a comment
zziplib: assertion failure in seeko.c
Description: zziplib is an intentionally lightweight library that offers the ability to easily extract data from files archived in a single zip file. A fuzz on it discovered an a NULL pointer access. The complete ASan output: # unzzipcat-seeko $FILE … Continue reading
Posted in advisories, security
1 Comment
zziplib: load of misaligned address in memdisk.c
Description: zziplib is an intentionally lightweight library that offers the ability to easily extract data from files archived in a single zip file. A fuzz on it discovered the load of a misaligned address. It can cause undefined behavior. The … Continue reading
Posted in advisories, security
Leave a comment
zziplib: NULL pointer dereference in main (unzzipcat.c)
Description: zziplib is an intentionally lightweight library that offers the ability to easily extract data from files archived in a single zip file. A fuzz on it discovered an a NULL pointer access. The complete ASan output: # unzzipcat $FILE … Continue reading
Posted in advisories, security
Leave a comment
zziplib: NULL pointer dereference in zzip_mem_entry_new (memdisk.c)
Description: zziplib is an intentionally lightweight library that offers the ability to easily extract data from files archived in a single zip file. A fuzz on it discovered an NULL pointer access. The complete ASan output: # unzzipcat-mem $FILE ==7955==ERROR: … Continue reading
Posted in advisories, security
1 Comment
zziplib: NULL pointer dereference in prescan_entry (fseeko.c)
Description: zziplib is an intentionally lightweight library that offers the ability to easily extract data from files archived in a single zip file. The unzzipcat-seeko utility provided by the package, by default, without any crafted zip shows a NULL pointer … Continue reading
Posted in advisories, security
1 Comment