tiny-js icon indicating copy to clipboard operation
tiny-js copied to clipboard

Null pointer dereference

Open bird8693 opened this issue 4 years ago • 0 comments

Enviroment

operating system: ubuntu18.04
compile command: make
test command: ./run_tests  poc

poc:

https://drive.google.com/open?id=1rn2gi6JArZARCNQIL2EARMLy06a0-i8V

vulnerability description:

It is a Null pointer dereference. Here is where it crashed, you can see the value of rax is 0:

image But the crash point has a reference to rax:

image

bird8693 avatar Apr 17 '20 15:04 bird8693