Disable ASAN OneDefinitionRuleViolation

nus-apr / CrashRepair

Security Vulnerability Repair via Concolic Execution and Code Mutations

17 stars 1 forks source link

Closed rshariffdeen closed 1 year ago

rshariffdeen commented 1 year ago

Validation should set ASAN_OPTION=detect_odr_violation=0, this option is to disable ASAN OneDefinitionRuleViolation which masks other bugs.

This affects CVE-2018-8806 and CVE-2018-8964 in libming

rshariffdeen commented 1 year ago

We could have an field for asan options in bug.json depending on the bug to have certain things enabled/disabled