[gnutls-devel] libtasn1 | Add initial fuzzing implementation (!38)

[Development of GNU's TLS library]

Nikos Mavrogiannopoulos started a new discussion on fuzz/libtasn1_encoding_fuzzer.c: https://gitlab.com/gnutls/libtasn1/merge_requests/38#note_198364764

> +	if (size > 2048) // same as max_len = 1000 in .options file
> +		return 0;
> +
> +	g_data = data;
> +	g_size = size;
> +
> +	int rc = asn1_parser2tree("pkix.asn", &definitions, errorDescription);
> +	if (rc != ASN1_SUCCESS)
> +		return 0;
> +
> +	rc = asn1_create_element(definitions, "TEST_TREE.Koko", &asn1_element);
> +	if (rc != ASN1_SUCCESS)
> +		goto out;
> +
> +	size_t vlen = size <= 32 ? size : 32;
> +	value = malloc(vlen);

This is unchecked malloc

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/libtasn1/merge_requests/38#note_198364764
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20190731/582582d1/attachment-0001.html>