Null pointer is dereference if 'noautoscale' option is used on an empty plot
You are right, this is already fixed in commit e9be99fb.
Calling tm_min with a high number cause an out-of-bounds read in ggmtime.
You need to compile gnuplot with ASAN enabled. I updated the reproduction steps. I dont know why this is working without defining x, but it does. Just execute gnuplot (with ASAN enabled) with the provided payload.
Calling tm_min with a high number cause an out-of-bounds read in ggmtime.
Out-of-bounds read in strlen_tex()
Buffer overflow in setfont of pngcairo terminal
Out-of-bounds read in the 'set font' option of the pcl5 terminal
Null pointer is dereference if 'noautoscale' option is used on an empty plot
Out-of-bounds read caused by strlen call on non null terminated string
Buffer overflow in plot range option
Buffer overflow in the font name processing code of the postscript terminal
Out-of-bounds read in EEPIC_put_text when passing 'str' of length 0
Out-of-bounds read in load_file()
Out-of-bounds read in load_file()
Out-of-bounds read in EEPIC_put_text when passing 'str' of length 0
Buffer overflow in the font name processing code of the postscript terminal
Buffer overflow in plot range option
Out-of-bounds read caused by strlen call on non null terminated string
Null pointer is dereference if 'noautoscale' option is used on an empty plot
Out-of-bounds read in the 'set font' option of the pcl5 terminal
Out-of-bounds read in the 'set font' option of the pcl5 terminal
Buffer overflow in setfont of pngcairo terminal
Buffer overflow in setfont of pngcairo terminal
Out-of-bounds read in strlen_tex()
Calling tm_min with a high number cause an out-of-bounds read in ggmtime.