Closed
Bug 1910071
Opened 4 months ago
Closed 3 months ago
NSS TLS client fuzzer crashes in TlsMutators::ShuffleRecords
Categories
(NSS :: Test, defect, P3)
NSS
Test
Tracking
(Not tracked)
RESOLVED
FIXED
People
(Reporter: mdauer, Assigned: mdauer)
Details
Attachments
(1 file)
The custom mutator copies the original corpus in a stack-allocated buffer:
// Store the original corpus.
uint8_t buf[size];
memcpy(buf, data, size);
However, Bug 1903783 increased the size limits potentially causing the buffer to be too big to be stored on the stack.
|
Assignee | |
Comment 1•4 months ago
|
||
|
||
Updated•3 months ago
|
Attachment #9416252 -
Attachment description: Bug 1910071 - Copy the original corpus in a heap-allocated buffer, r=jschanck → Bug 1910071 - Copy original corpus to heap-allocated buffer, r=djackson,jschanck
|
||
Updated•3 months ago
|
Group: crypto-core-security
Severity: -- → S4
Priority: -- → P3
|
|
||
Comment 2•3 months ago
|
||
Status: ASSIGNED → RESOLVED
Closed: 3 months ago
Resolution: --- → FIXED
You need to log in
before you can comment on or make changes to this bug.
Description
•