New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Multiple heap out-of-bounds writes of size 1 in marshal.c #2963
Comments
wargio
added a commit
that referenced
this issue
Aug 22, 2022
This was referenced Aug 22, 2022
Closed
wargio
added a commit
that referenced
this issue
Aug 23, 2022
XVilka
pushed a commit
that referenced
this issue
Aug 24, 2022
XVilka
pushed a commit
that referenced
this issue
Aug 24, 2022
XVilka
pushed a commit
that referenced
this issue
Aug 24, 2022
imbillow
pushed a commit
that referenced
this issue
Aug 24, 2022
XVilka
pushed a commit
that referenced
this issue
Aug 30, 2022
XVilka
pushed a commit
that referenced
this issue
Aug 30, 2022
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Hi! We've been fuzzing your project and found the following errors in
librz/bin/format/pyc/marshal.cWork environment
OS: Ubuntu 20.04
File format: -
rizin version: 4b38597
Bug description
Heap out-of-bounds write (segv) of size 1 in
librz/bin/format/pyc/marshal.c:345andlibrz/bin/format/pyc/marshal.c:366Steps to reproduce
Build docker container from https://github.com/ispras/oss-sydr-fuzz/tree/master/projects/rizin:
sudo docker build -t oss-sydr-fuzz-rizin .Run docker container:
sudo docker run --privileged --network host -v /etc/localtime:/etc/localtime:ro --rm -it -v $PWD:/fuzz oss-sydr-fuzz-rizin /bin/bashExecute rizin with crashing input (1) (we sent all crashing inputs to you by email):
/rizin-fuzzing/libfuzzer-asan/bin/rizin -qq crash-29b84af05a36d9628093200a1a07b7d931009c84Execute rizin with crashing input (2):
/rizin-fuzzing/libfuzzer-asan/bin/rizin -qq crash-490d344f047c5223f5bfe701dfb406ca2a00710dYou will see the following output (for the first crashing input, the second one is similar):
The text was updated successfully, but these errors were encountered: