fouzhe

fix the return status check of subprocess

9

The description of `os.waitpid` is: ``` waitpid(...) waitpid(pid, options) -> (pid, status) Wait for completion of a given child process. ``` The return value of `os.waitpid` is a tuple thus...

Avoid repeated update of some fields when fuzzing

4

Just an improvement of `fuzz`.

FLIF crash with specific image: heap-buffer-overflow

7

Hi, all. This PAM image file can cause crash. It can cause heap-buffer-overflow. Here is ASAN result and I attached the [file](https://github.com/FLIF-hub/FLIF/files/2087669/crash.zip). Thanks. Execute the following command: ``` ./flif --overwrite...

Heap-buffer-overflow in vsomeip_v3::deserializer::look_ahead

4

There is a heap-buffer-overflow bug and the detailed ASAN report is shown below: ``` ================================================================= ==13535==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x606000006538 at pc 0x7f4685133846 bp 0x7f467c2eed80 sp 0x7f467c2eed78 READ of...

``` ==577==ERROR: AddressSanitizer: heap-use-after-free on address 0x603000000074 at pc 0x00000051fdb6 bp 0x7f86ee1fec60 sp 0x7f86ee1fec58 READ of size 1 at 0x603000000074 thread T1 #0 0x51fdb5 in Ethernet_receivePacket /root/fouzhe/my_fuzz/libiec61850/hal/ethernet/linux/ethernet_linux.c:232:15 #1 0x5129ba in...

Hi all, When I tried to build the docker image, I got the following error: ``` [/root/go/src/github.com/fireeye/gocrack/docker] git:(master) $ make build ... Step 23/25 : USER build ---> Using cache...

Hi,all! I use **clang 6.0 and AddressSanitizer** to build **wav2json**, this [file](https://github.com/fouzhe/security/blob/master/wav2json/crash.wav) can cause assert failure when executing this command: ```shell ./wav2json crash.wav -p 3 --channels left right mid side...

The type order of optional arguments affects the results

2

I used version: `1.6.1`. The following program is correct: ```Python s = "mode: default" schema_map = { "mode": sy.Str(), sy.Optional("duration", default=None, drop_if_none=False): sy.EmptyNone() | sy.Float(), } config_yaml = sy.load( yaml_string=s,...

Hi,all. I use **Clang 6.0 and AddressSanitizer** to build **cmft**, this [file](https://github.com/fouzhe/security/blob/master/cmft/down-reference.ktx) can cause stack buffer overflow when executing this command: ```shell ./cmftRelease --input ./down-reference.ktx --output0 1 ``` This is...

I use **Clang 6.0 and AddressSanitizer** to build **pdf2json v0.69**, this [file](https://github.com/fouzhe/security/blob/master/pdf2json/detected_memory_leaks.pdf) can cause memory leaks with the following command: ```shell ./pdf2json detected_memory_leaks.pdf 1.json ``` This is the ASAN information:...