Manh Nguyen

afl-cov with CGC binaries

4

Hi, Any idea on how to run afl-cov when fuzzing CGC DARPA binaries? Thanks.

Hi there, This is a code I've used so far to display packet drop stats at the NIC. Best.

Questions about scaling example

21

Hi there, I have several questions concerning the scaling example. When I rerun the openNetVM manager using the following commands `onvm/go.sh -k 1 -n 0xF8 -s stdout -m 0,1,2`, and...

SEGV in TextPage::createPath

1

Hi, I found a crash in (the latest commit `8296a3d` on master). PoC: https://github.com/strongcourage/PoCs/blob/master/pdfalto_8296a3d/PoC_segv_TextPage::createPath Command: pdfalto $PoC /dev/null ASAN says: ~~~ ==17560==ERROR: AddressSanitizer: SEGV on unknown address 0x02007f614fef (pc 0x00000073e2e2...

UAF in XmlAltoOutputDev.cc:6457

1

Hi, I found a UAF bug in (the latest commit `8296a3d` on master). PoC: https://github.com/strongcourage/PoCs/blob/master/pdfalto_8296a3d/PoC_uaf_TextPage::createPath Command: pdfalto $PoC /dev/null ASAN says: ~~~ ==12326==ERROR: AddressSanitizer: heap-use-after-free on address 0x602000036418 at pc...

Hi, Our fuzzer found a crash due to a SEGV on unknown address bug on the function cmft::imageIsCubeCross. I built cmft (the latest commit 06a3516 on master) using the configuration...

Hi, Our fuzzer found a crash due to a heap buffer overflow on the function cmft::rgba8ToRgba32f. I built cmft (the latest commit 06a3516 on master) using the configuration "release64" on...

Hi, Our fuzzer found a crash due to a heap buffer overflow on the function cmft::imageTransformArg. I built cmft (the latest commit 06a3516 on master) using the configuration "release64" on...

Hi, Our fuzzer found a crash due to a heap buffer overflow on the function cmft::imageLoadTga. I built cmft (the latest commit 06a3516 on master) using the configuration "release64" on...

Hi, Our fuzzer found a crash due to a negative size parameter bug on the function cmft::imageLoadStb. I built cmft (the latest commit 06a3516 on master) using the configuration "release64"...