Segmentation faults 2017-05-08

[rwhitworth]

Hello,
I was using American Fuzzy Lop (afl-fuzz) to fuzz input the jimsh program. Is fixing the crashes from these input files something you're interested in? The input files can be found here: https://github.com/rwhitworth/jimtcl-fuzz/tree/master/2017-05-08.

The files can be executed as ./jimsh id_filename to cause seg faults.

Let me know if I can provide any more information to help narrow down this issue.

[msteveb]

Thanks. I'll take a look.
BTW, I suggest avoiding 'exec' since it could easily cause problems.

[msteveb]

I've pushed fixes to all of these except id:000034,sig:11,src:005372,op:havoc,rep:4

Note that a few things can't be fixed.

• Infinite eval recursion. This isn't a bug but probably hits your time limit
• Memory exhaustion. e.g. lrepeat or string repeat with huge counts

[msteveb]

Now fixed id:000034,sig:11,src:005372,op:havoc,rep:4