Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Keep fuzzing whatever the header says about dictionary size #2

Open
catenacyber opened this issue Sep 12, 2019 · 0 comments
Open

Keep fuzzing whatever the header says about dictionary size #2

catenacyber opened this issue Sep 12, 2019 · 0 comments

Comments

@catenacyber
Copy link

To me, this is a flaw for the LZMA SDK

lzma-fuzz/lzmadec_fuzzer.cc

Line 47 in 875388c

// Avoid using too much memory.

With the inputs limited in size from kMaxInputSize = 100 * 1024, we can expect LZMA SDK to handle them without needing 2GB memory

A fix could look like this https://github.com/OISF/libhtp/pull/241/files/08c3d4a2338275b854198938ca97f55c52c5a29e..c504a981c59638c1b7a992bfd8fa117b814e6cd4#diff-1143601df653d71da0a4ff7c68de9e29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@catenacyber