* dash security crash report
@ 2016-03-08 0:23 牛保龙
0 siblings, 0 replies; only message in thread
From: 牛保龙 @ 2016-03-08 0:23 UTC (permalink / raw)
To: dash
[-- Attachment #1: Type: text/plain, Size: 258 bytes --]
i use AFL fuzz dash shell and get 7 null deref vulnerablity and 1
stack corruption vulnerablity. the crash testcase is in the
attachment.
system: Ubuntu 14.04.4 x86_64
dash: 0.58
jush use /bin/sh or /bin/dash execute the testcase then you can get a crash.
[-- Attachment #2: cras_testcases.zip --]
[-- Type: application/zip, Size: 2921 bytes --]
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2016-03-08 0:23 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2016-03-08 0:23 dash security crash report 牛保龙
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).