tiny-js
tiny-js copied to clipboard
Null pointer dereference
Enviroment
operating system: ubuntu18.04
compile command: make
test command: ./run_tests poc
poc:
https://drive.google.com/open?id=1rn2gi6JArZARCNQIL2EARMLy06a0-i8V
vulnerability description:
It is a Null pointer dereference. Here is where it crashed, you can see the value of rax is 0:
But the crash point has a reference to rax: