Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

segfault due to dereference near-null pointer in do_refill #24

Closed
kcwu opened this issue Aug 20, 2016 · 1 comment
Closed

segfault due to dereference near-null pointer in do_refill #24

kcwu opened this issue Aug 20, 2016 · 1 comment

Comments

@kcwu
Copy link
Contributor

kcwu commented Aug 20, 2016

input

00000000: 3c74 6162 6c65 3e3c 6c69 7374 696e 673e  <table><listing>
00000010: 3c74 6162 6c65 5f61 6c74 2074 6964 3d30  <table_alt tid=0
00000020: 3c2f 6c69 7374 696e 673c 7461 626c 653e  </listing<table>

gdb

Program received signal SIGSEGV, Segmentation fault.
0x00000000004423a4 in do_refill (tbl=0x7bf000, row=0, col=0, maxlimit=79) at table.c:768
768                     int limit = tbl->tables[id].indent + t->total_width;
(gdb) p t
$1 = (struct table *) 0x0

found by afl-fuzz

tats added a commit that referenced this issue Aug 24, 2016
@tats
Copy link
Owner

tats commented Aug 24, 2016

Fixed, thank you.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants