Tianxiao Gu

heap-buffer-overflow in img_load_from_data

1

Download and unzip the attached file. [184.zip](https://github.com/posva/catimg/files/2369705/184.zip) ``` ================================================================= ==30322==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x6020000000f2 at pc 0x0000005bdf2d bp 0x7ffe187d5be0 sp 0x7ffe187d5bd8 WRITE of size 2 at 0x6020000000f2 thread T0...

New exception on the last build. ``` [APE] *** INFO *** Refinement takes 730380 ms. [APE] >>>>>>>> SATA end step [16148][22766344531421] [APE] Internal error java.lang.NullPointerException: Attempt to invoke virtual method...

java.lang.RuntimeException: An unvisited state has non-empty transitions.

1

java.lang.RuntimeException: An unvisited state has non-empty transitions. at com.android.commands.monkey.ape.agent.StatefulAgent.checkAndRefreshNewState(StatefulAgent.java:525) at com.android.commands.monkey.ape.agent.StatefulAgent.preCheckTrivialNewState(StatefulAgent.java:565) at com.android.commands.monkey.ape.agent.StatefulAgent.buildAndValidateNewState(StatefulAgent.java:574) at com.android.commands.monkey.ape.agent.StatefulAgent.updateStateInternal(StatefulAgent.java:586) at com.android.commands.monkey.ape.agent.ApeAgent.updateStateWrapper(ApeAgent.java:264) at com.android.commands.monkey.ape.agent.ApeAgent.updateState(ApeAgent.java:251) at com.android.commands.monkey.MonkeySourceApe.generateEvents(MonkeySourceApe.java:782) at com.android.commands.monkey.MonkeySourceApe.getNextEvent(MonkeySourceApe.java:1277) at com.android.commands.monkey.Monkey.runMonkeyCycles(Monkey.java:1377) at com.android.commands.monkey.Monkey.run(Monkey.java:770) at com.android.commands.monkey.Monkey.main(Monkey.java:612) at...

dex_fuzzer crashed in _yr_object_lookup

2

Our fuzzing tool has found the following crash. Please help us to validate whether this is a bug of yara. [test-cases.zip](https://github.com/VirusTotal/yara/files/2364930/test-cases.zip) Reproduce: ``` dex_fuzzer test-case ``` Output: ``` INFO: Seed:...

admesh hang on the input

4

admesh hangs on the attached input. [h0.zip](https://github.com/admesh/admesh/files/2373130/h0.zip) ``` ./admesh h0 ```

Version: v4.2 from F-Droid Found on an Android Studio emulator and can be reproduced on Nexus 5 (Android 6.0.1) This exception happens when you click the bookmark button during loading...

Reproduce: 1. Create an invalid db file by `adb shell touch /sdcard/test.db` 2. Launch the app and open the `test.db`. 3. Click `MORE` on the imported `test.db`. 4. Click `Card...

The input may not be a valid `int` number. Reproduce: 1. Set a very large number in `Options -> Max recent list size` ``` // java.lang.NumberFormatException: Invalid int: "817737007732267" //...

Affected version: 1.8.3 Reproducing: 1. `Backup` -> `NEW BACKUP` 2. Rotate your phone. ``` // java.lang.RuntimeException: Unable to start activity ComponentInfo{com.catchingnow.tinyclipboardmanager/com.catchingnow.tinyclipboardmanager.ActivityBackupNew}: java.lang.ClassCastException: android.widget.HorizontalScrollView$SavedState cannot be cast to android.widget.ScrollView$SavedState // at...

I found a crash during evaluating my automated testing tool. It seems that the GUI cannot be updated asynchronously in another thread. It might be a trivial bug. Stack trace...