magma
magma copied to clipboard
Openssl bugs to potentially graveyard?
Thank you for this challenging and useful dataset! After reviewing some of the openssl
bugs manually, I currently believe
MAE114
appears to be untriggerable. The bug condition here requires peek=1
. However, the harnesses set peek=0
explicitly or implicitly here and here. The original bug report confirms this property here.
MAE111
appears to be untriggerable too. I did not analyze it as carefully as the others, but upon reading this comprehensive description here, the default certificates lacking a particular elliptic curve provided by the fuzzer harnesses may never trigger the bug.
I am happy to provide a POC for demonstrability of MAE114
.
Given this information, should these bugs be moved to the graveyard or should the harnesses be fixed? What do you think?