magma icon indicating copy to clipboard operation
magma copied to clipboard

Openssl bugs to potentially graveyard?

Open AbhishekShah212 opened this issue 3 years ago • 0 comments

Thank you for this challenging and useful dataset! After reviewing some of the openssl bugs manually, I currently believe

MAE114 appears to be untriggerable. The bug condition here requires peek=1 . However, the harnesses set peek=0 explicitly or implicitly here and here. The original bug report confirms this property here.

MAE111 appears to be untriggerable too. I did not analyze it as carefully as the others, but upon reading this comprehensive description here, the default certificates lacking a particular elliptic curve provided by the fuzzer harnesses may never trigger the bug.

I am happy to provide a POC for demonstrability of MAE114.

Given this information, should these bugs be moved to the graveyard or should the harnesses be fixed? What do you think?

AbhishekShah212 avatar Apr 15 '21 02:04 AbhishekShah212