Sherlock Fang issues

Repositories
Issues
Comments

Results 3 issues of


                                            Sherlock Fang

False positives in Pulse when analyzing CUrl

I intended to use infer pulse to analyze this bug: https://curl.se/mail/lib-2023-05/0013.html which strangely ended up not being detected, as it seems to be a simple UAF case. To manually debug...

Fixed out-of-bound write in libbf.c

Out-of-bound write in __bf_div, libbf.c

**Description** In the following file: https://github.com/bellard/quickjs/blob/master/libbf.c#L1718 At line 1718 inside function `__bf_div` there exists a security vulnerability due to the lack of a check for correctness of allocation in `taba...