Closed
Bug 1597931
Opened 6 years ago
Closed 6 years ago
Add missing fuzzing instrumentation to extensions/auth/
Categories
(Core :: Networking: HTTP, enhancement, P2)
Tracking
()
RESOLVED
FIXED
mozilla72
People
(Reporter: decoder, Assigned: decoder)
References
Details
(Keywords: sec-other, Whiteboard: [necko-triaged][adv-main72-][post-critsmash-triage])
Attachments
(1 external file)
There is apparently additional (reachable) networking code in extensions/auth/ that is not instrumented for libFuzzer yet. The fuzzer found a bug there (bug 1595692) by chance and that's how we learned about this code. Marking s-s for now because I would like the fuzzer to spend some time on this locally before landing to central.
|
||
Updated•6 years ago
|
Group: core-security-release → network-core-security
|
Assignee | |
Comment 1•6 years ago
|
||
|
||
Updated•6 years ago
|
Priority: -- → P2
Whiteboard: [necko-triaged]
|
|
||
Comment 2•6 years ago
|
||
https://hg.mozilla.org/integration/autoland/rev/5afa8f03bfedb6634a5012bc4e9cfb0dafa257ae
https://hg.mozilla.org/mozilla-central/rev/5afa8f03bfed
Group: network-core-security → core-security-release
Status: ASSIGNED → RESOLVED
Closed: 6 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla72
|
|
||
Updated•6 years ago
|
status-firefox71:
--- → wontfix
status-firefox-esr68:
--- → wontfix
|
||
Updated•6 years ago
|
Whiteboard: [necko-triaged] → [necko-triaged][adv-main72-]
|
||
Updated•6 years ago
|
Flags: qe-verify-
Whiteboard: [necko-triaged][adv-main72-] → [necko-triaged][adv-main72-][post-critsmash-triage]
|
||
Updated•5 years ago
|
Group: core-security-release
You need to log in
before you can comment on or make changes to this bug.
Description
•