h0n9xu

Results 35 comments of h0n9xu

@kud1ing and @fpoli Thanks so much for your help! I think I've to choose another approach.

FYI, we collected *several other pocs* with different crashing backtraces [here](https://github.com/ntu-sec/pocs/tree/master/myhtml/caec858/crashes).

Hi @lexborisov , I had a quick review of the source code, it seems to relevant with the data race on `queue->nodes_uses`, which subsequently affects the memory (re)allocation operations and...

@lexborisov Great! Will try lexbor :ok_hand:

Thanks, @ifratric ! I followed your suggestions and modified the `from_file.c` (add a function `myfunc` as the fuzzing entry, see below) and compiled it with x64 cl.exe for a 64bit...

@ifratric Got it, thanks! Will follow your advice and try :smile:

Another PoC which contains one byte: ![libpng_issue_1](https://user-images.githubusercontent.com/843267/41361935-d0333934-6f62-11e8-9a8e-b879ddf6aba5.png)

This seems a duplicate to #502, #506 or the root cause is somewhat relevant.

The PoC file we found: [palette_C.hpp:130.txt](https://github.com/FLIF-hub/FLIF/files/2092439/palette_C.hpp.130.txt)