[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Heap buffer overread in token_is_assignment
|
From: |
Eduardo Bustamante |
|
Subject: |
Re: Heap buffer overread in token_is_assignment |
|
Date: |
Tue, 20 Feb 2018 15:36:31 -0600 |
On Tue, Feb 20, 2018 at 2:07 PM, <jeremy@feusi.co> wrote:
>
>
>
>
> Configuration Information [Automatically generated, do not change]:
> Machine: i686
> OS: linux-gnu
> Compiler: afl-gcc
> Compilation CFLAGS: -DPROGRAM='bash' -DCONF_HOSTTYPE='i686'
> -DCONF_OSTYPE='linux-gnu' -DCONF_MACHTYPE='i686-pc-linux-gnu'
> -DCONF_VENDOR='pc' -DLOCALEDIR='/usr/local/share/locale' -DPACKAGE='bash'
> -DSHELL -DHAVE_CONFIG_H -I. -I. -I./include -I./lib -fsanitize=address
> -Wno-parentheses -Wno-format-security
> uname output: Linux jefeus-vm 4.9.0-4-686-pae #1 SMP Debian 4.9.65-3+deb9u1
> (2017-12-23) i686 GNU/Linux
> Machine Type: i686-pc-linux-gnu
>
> Bash Version: 4.4
> Patch Level: 19
> Release Status: release
Hi Jeremy. I see that you're fuzzing against 4.4.19. I did a bunch of
fuzzing work last year (mainly in the parser code and readline), so
some of these issues might be fixed already in git. For example, I'm
not able to reproduce this one against the `devel' branch in the git
repository. My recommendation here would be to fuzz against the
`devel' branch directly.