Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
How to reproduce:
echo '<U><frameset><frameset>0000000000000000000000000<button type=>000<i></button>00000000000000000000000000000000000000000000' | ./w3m -T text/html -dump
ASAN output:
ASAN:SIGSEGV ================================================================= ==3819287==ERROR: AddressSanitizer: stack-overflow on address 0x7ffd7abd6ff8 (pc 0x0000006331a5 bp 0x0000006b65e5 sp 0x7ffd7abd7000 T0) #0 0x6331a4 (/w3m/run/w3m.afl-asan+0x6331a4) #1 0x633330 (/w3m/run/w3m.afl-asan+0x633330) #2 0x633330 (/w3m/run/w3m.afl-asan+0x633330) last line repeats....
This is found by afl-fuzz.
The text was updated successfully, but these errors were encountered:
Prevent segfault for formUpdateBuffer
9f0bdcf
Bug-Debian: #9 Bug-Debian: #10
Fixed, thank you.
Sorry, something went wrong.
f065a49
Bug-Debian: #9 [CVE-2016-9423] Bug-Debian: #10 [CVE-2016-9431] Origin: https://anonscm.debian.org/cgit/collab-maint/w3m.git/commit/?id=9f0bdcfdf061db3520bd1f112bdc5e83acdec4be
No branches or pull requests
How to reproduce:
ASAN output:
This is found by afl-fuzz.
The text was updated successfully, but these errors were encountered: