Gabe Sherman

Heap-buffer-overflow on intersection

4

I am an undergraduate student exploring automatic fuzzing harness generation for open source api's. I found that executing geosop instrumented with asan with these arguments: `./geosop -a "GEOMETRYCOLLECTION(POINT(0 0 59.083333333333336),...

I am an undergraduate student exploring automatic fuzzing harness generation for open source api's. I found that executing geosop with these arguments: ` ./geosop -a "POLYGON((0 0, 10 0, 10...

heap-buffer-overflow in H5Odtype.c

3

A heap-buffer-overflow occurs in the below program. This behavior occurs at line 149 in H5Odtype.c. ``` #include "hdf5.h" #include #include #include #include #include #include typedef uint8_t u8; typedef uint16_t u16;...

allocation-size-too-big error in H5Centry.c

1

An allocation-size-too-big error occurs in the h5dump program when provided with a malformed input. This behavior occurs at line 1015 in H5Centry.c. ### How to trigger ```LD_PRELOAD=path-to/libhdf5.so h5dump poc``` ###...

A heap-buffer-overflow occurs in the h5dump program when provided with a malformed input. This behavior occurs at line 515 in H5Fio.c ### How to trigger ```LD_PRELOAD=path-to/libhdf5.so h5dump poc``` ### POC...

A StackOverflow error occurs in the h5dump program when provided with a malformed input. This behavior occurs at line 45 in vasprintf.c ### How to trigger ```LD_PRELOAD=path-to/libhdf5.so h5dump poc``` ###...

Segmentation fault in H5Oint.c

1

A segmentation fault occurs in the below program when provided with a malformed input. This behavior occurs at line 1070 in H5Oint.c ``` #include #include #include #include #include int main(int...

allocation-size-too-big error in H5MM.c

1

An allocation-size-too-big error occurs in the h5dump program when provided with a malformed input. This behavior occurs at line 87 in H5MM.c ### How to trigger ```LD_PRELOAD=path-to/libhdf5.so h5dump poc``` ###...

infinite loop closing library

4

I am an undergraduate student exploring automatic fuzzing harness generation for open source api's. When running the below code with the linked file, the following error is printed.: `HDF5: infinite...

Segmentation fault at line 430 in ucl_emitter.c

1

A segmentation fault occurs in the below program. This behavior occurs at line 430 in ucl_emitter.c. ``` #include "ucl.h" #include #include #include #include #include #include typedef uint8_t u8; typedef uint16_t...