Insert return should allow empty string retval (CVE-2018-8964)

nus-apr / CrashRepair

Security Vulnerability Repair via Concolic Execution and Code Mutations

17 stars 1 forks source link

Insert return should allow empty string retval (CVE-2018-8964) #156

Closed rshariffdeen closed 1 year ago

rshariffdeen commented 1 year ago

the fix function signature is

static char *
getName(struct SWF_ACTIONPUSHPARAM *act)

but the repair generates return values of integer, if we scan the return values in the source file we would identify "" the empty string as a possible fix-ingredient, which is the correct return value for this patch.