Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

AFL crash #39

Closed
aschampion opened this issue Dec 17, 2019 · 3 comments · Fixed by #41
Closed

AFL crash #39

aschampion opened this issue Dec 17, 2019 · 3 comments · Fixed by #41

Comments

@aschampion
Copy link
Contributor

The AFL fuzz I started in #37 found a crash (after 37 days and 2 cycles!) where the decompressed data does not match the input (with CompressionOptions::default()). I'll look into in the next few days and also PR the fuzz binary. In the meantime here's the crash input.
id:000000,sig:06,src:000831,op:havoc,rep:64.zip

@oyvindln
Copy link
Collaborator

Oh wow, will look into it in a week when I have time if no one else has found the issue by then.

@aschampion
Copy link
Contributor Author

Last I checked there were 3 more unique crashes. I should note all of these are just the compression roundtrip data not matching the original data; no crashes in the library. I'll upload them next time I'm at that computer.

@aschampion
Copy link
Contributor Author

The other 3: crashes.zip

aschampion added a commit to aschampion/deflate-rs that referenced this issue Jan 17, 2020
Discovered by AFL and includes regression tests for the found inputs.

Closes image-rs#39.
aschampion added a commit to aschampion/deflate-rs that referenced this issue Jan 17, 2020
Discovered by AFL and includes regression tests for the found inputs.

Closes image-rs#39.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants