[documentliberation-discuss] [ANN] libabw 0.1.1 has been released

[David Tardon]

Hi,

On Sat, Dec 20, 2014 at 05:44:50PM +0100, Hanno Böck wrote:
> Hi,
> 
> I did a quick run with american fuzzy lop on libabw and it found the
> attached crasher.
> Attached both sample exposing segfault and asan/valgrind output. It's
> an invalid memory read access.

This has already been found by coverity, but thanks anyway.

> 
> As here are a lot of people working on import filters: These are very
> suspectible to these type of memory access errors and they can often
> easily be found with fuzzing. You may wanna have a look at
> https://fuzzing-project.org

I know... I used zzuf on some of our libs in the past. And I have been
using afl since I discovered it 4-5 weeks ago. I have already fixed over
20 crashes/hangs in various libraries, but I still have got more to go
through.

D.