heap-buffer-overflow read in process_textarea() #58
Comments
|
This one is simple. |
tats
added a commit
that referenced
this issue
Dec 5, 2016
|
Fixed, thank you. |
tats
added a commit
that referenced
this issue
May 5, 2017
- New patch 934_menu.patch to fix buffer overflow (#49) - New patch 935_shiftanchor.patch to fix buffer overflow (#62) - New patch 936_metarefresh.patch to fix buffer overflow (#63) - New patch 937_lineproc0.patch to fix buffer overflow (#67) - New patch 938_lineproc2body.patch to fix buffer overflow (#61) - New patch 939_textarea.patch to fix buffer overflow (#58) - New patch 940_tabattr.patch to fix buffer overflow (#60) - New patch 941_integeredwidth.patch to fix buffer overflow (#70) - New patch 942_tridvalue.patch to fix buffer overflow (#71) - New patch 943_pushlink.patch to fix buffer overflow (#64, #66) - New patch 944_lineproc0.patch to fix use after free (#65) - New patch 945_wtfstrwidth.patch to fix buffer overflow (#57) - New patch 946_strnewsize.patch to fix buffer overflow (#72) - New patch 947_realcolumn.patch to fix buffer overflow (#69) - New patch 948_getmclen.patch to fix buffer overflow (#59, #73, #74, #75, #76, #78, #79, #80, #83, #84) - New patch 949_wtftowcs.patch to fix buffer overflow (#77) - New patch 950_textarea.patch to fix infinite loop (#85) - New patch 951_lineproc0.patch to fix use after free (#81) - New patch 952_formupdatebuffer.patch to fix buffer overflow (#82) - New patch 953_formupdateline.patch to fix buffer overflow (#68#issuecomment-266214643) - New patch 954_wtfparse1.patch to fix buffer overflow (#68)
tats
added a commit
that referenced
this issue
May 5, 2017
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
input (xxd cases/tats-w3m-58)
how to reproduce:
stderr:
This is detected with help of dummy libgc wrapper. See http://github.com/kcwu/fuzzing-w3m/notgc for detail.
More detail to reproduce please see http://github.com/kcwu/fuzzing-w3m
For your convenience,
gdbline:
LD_LIBRARY_PATH=./notgc ASAN_OPTIONS=abort_on_error=1:detect_leaks=0 gdb --args ./w3m-tats.asan -T text/html -dump cases/tats-w3m-58
This is found by afl-fuzz.
The text was updated successfully, but these errors were encountered: