search

HexHive / magma

A ground-truth fuzzing benchmark suite based on real programs with real bugs.
https://hexhive.epfl.ch/magma
289 stars 84 forks source link

Fix SSL015 CANARIES condition #140

Open Marsman1996 opened 1 year ago

Marsman1996 commented 1 year ago

According to the code in MAGMA_ENABLE_FIXES 

if (p7->d.ptr == NULL) {
    PKCS7err(PKCS7_F_PKCS7_DATAINIT, PKCS7_R_NO_CONTENT);
    return NULL;
}

and other 2 CANARIES code, https://github.com/HexHive/magma/blob/75d1ae7b180443a778b8830c79176ca5f93642ac/targets/openssl/patches/bugs/SSL015.patch#L40 https://github.com/HexHive/magma/blob/75d1ae7b180443a778b8830c79176ca5f93642ac/targets/openssl/patches/bugs/SSL015.patch#L61 p7->d.ptr should also be null when vulnerability is triggered.