Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

segfault due to dereference near-null pointer in do_refill #24

Closed
kcwu opened this issue Aug 20, 2016 · 1 comment

Comments

Projects
None yet
2 participants
@kcwu
Copy link
Contributor

commented Aug 20, 2016

input

00000000: 3c74 6162 6c65 3e3c 6c69 7374 696e 673e  <table><listing>
00000010: 3c74 6162 6c65 5f61 6c74 2074 6964 3d30  <table_alt tid=0
00000020: 3c2f 6c69 7374 696e 673c 7461 626c 653e  </listing<table>

gdb

Program received signal SIGSEGV, Segmentation fault.
0x00000000004423a4 in do_refill (tbl=0x7bf000, row=0, col=0, maxlimit=79) at table.c:768
768                     int limit = tbl->tables[id].indent + t->total_width;
(gdb) p t
$1 = (struct table *) 0x0

found by afl-fuzz

tats added a commit that referenced this issue Aug 24, 2016

@tats

This comment has been minimized.

Copy link
Owner

commented Aug 24, 2016

Fixed, thank you.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.