argv-fuzz-inl.h contains a buffer overflow

google / AFL

american fuzzy lop - a security-oriented fuzzer

https://lcamtuf.coredump.cx/afl/

Apache License 2.0

3.56k stars 625 forks source link

argv-fuzz-inl.h contains a buffer overflow #136

Open LevitatingBusinessMan opened 3 years ago

LevitatingBusinessMan commented 3 years ago

Here a buffer of a finite size is made. And this loop will overflow it.

This has been reported and patched in AFL++ but I thought I should make an issue here as well for anyone struggling with this. I only found this because it was mentioned in a LiveOverflow video.