Closed Bug 1920470 Opened 17 days ago Closed 13 days ago

nssfuzz-tls-client: Assertion `input->len == outputLen' failed

Categories

(NSS :: Test, defect)

Product:
NSS
Component:
Test
Type:
defect

Tracking

(Not tracked)

Status:
RESOLVED FIXED

People

(Reporter: mdauer, Assigned: mdauer)

Details

Attachments

(1 file)

Bug 1920470 - Remove incorrect assert, r?djackson,#nss-reviewers
48 bytes, text/x-phabricator-request
Details | Review

OSS-Fuzz: https://oss-fuzz.com/testcase-detail/4722752127303680

The assertion at https://searchfox.org/nss/rev/7705b3868dbf14cdfc3315791d01709e1041a5cd/fuzz/tls_common.cc#78 is wrong as outputLen may also be greater than input->len. Additionally, the decoding function is responsible for checking that outputLen is sufficiently large.

https://hg.mozilla.org/projects/nss/rev/ef2dd397b8f99be2953c549806c59d4e1b2e56ac

Status: ASSIGNED → RESOLVED
Closed: 13 days ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: