Menu

#529 invalid left shift in xmltok_impl.c and xmltok.c

Feature Request
closed-fixed
None
5
2017-09-03
2015-07-30
Dingbao Xie
No

After running afl-fuzzer on expat for one night, I found a bunch of invalid shift xmltok_impl.c and xmltok.c.
To reproduce them, first build the source code with flag '-fsanitize=undefined' then compile the example code 'element.c'.
At last, execute command './element <$file', you will see a bunch of invalid shift.
Attached are the malformed input xml files.

1 Attachments

Discussion

  • Sebastian Pipping

    • status: open --> closed-fixed
    • assigned_to: Sebastian Pipping
     

Log in to post a comment.