GoldBinocle

Hi :b, I added ```rust println!("pstree_string: {}(end)", pstree_string); ``` after [this](https://github.com/fgsect/FitM/blob/main/src/utils.rs#L65) line, and the output was: ``` pstree_string: (end) ``` The `pstree_string` was empty. I didn't install criu specially. I...

Hi, the `active-state/stderr` and `active-state/snapshot/criu.log` are attached (https://github.com/fgsect/FitM/files/8458437/active-state.zip), and here is the output when calling crit (`criu/crit/crit-python3`) manually ``` $ ./criu/crit/crit-python3 Traceback (most recent call last): File "/root/projects/fuzzer/FitM/./criu/crit/crit-python3", line 3,...

To make clear the reason of the crash, we added some debug information to see the value of `n` and `errno` before `memcpy`: ```diff diff --git a/accel-pppd/ctrl/pptp/pptp.c b/accel-pppd/ctrl/pptp/pptp.c index a5bcaca..89e4b78...

Hi, @DmitriyEshenko. Actually, any ASAN (Google Address Sanitizer) report associated with buffer-overflow/underflow has this message "HINT: this may be a false positive if your program uses some custom stack unwind...

> Hello @GoldBinocle , I'm worried this message "HINT: this may be a false positive if your program uses some custom stack unwind mechanism, swapcontext or vfork" Did you try...

Hi, what's the status of this bug? Do you need more details from me? If so, what details should I provide? Thanks.

> I was going to take a look at this due to the CVE. @GoldBinocle I'm not sure I completely understand your POC; are you fuzzing the response from the...

Hi, @DmitriyEshenko. Yeah, I can reproduce it using `-p`, and it's the same error.