Re: nginScript - is it fuzzed?

2015-09-28 Thread Jacek Wielemborek
W dniu 28.09.2015 o 17:26, Alt pisze: > Hello, > > Markus Linnala has found at least two bugs with afl-fuzz: > http://forum.nginx.org/read.php?29,261583 > http://forum.nginx.org/read.php?29,261582 > > nginScript is very new, I'm sure you can help to test it if you know how to > use afl-fuzz. > >

Re: nginScript - is it fuzzed?

2015-09-28 Thread Alt
Hello, Markus Linnala has found at least two bugs with afl-fuzz: http://forum.nginx.org/read.php?29,261583 http://forum.nginx.org/read.php?29,261582 nginScript is very new, I'm sure you can help to test it if you know how to use afl-fuzz. Best Regards, Olivier Posted at Nginx Forum: http://for

Re: nginScript - is it fuzzed?

2015-09-28 Thread Jacek Wielemborek
W dniu 28.09.2015 o 16:29, Jacek Wielemborek pisze: > [1] https://lolware.net/2015/04/28/nginx-fuzzing.html Oh crap, sorry, actually I misread the article and it looks like nothing was found. Still, running the new language through a fuzzer sounsd worthwhile - if anyone is interested in this task,

nginScript - is it fuzzed?

2015-09-28 Thread Jacek Wielemborek
Hello, I just read this blog post: https://www.nginx.com/blog/launching-nginscript-and-looking-ahead Given that afl-fuzz was already successful in finding security bugs in Nginx [1], I figured I'd ask whether nginScript was or is planned to be fuzzed as well. Quick Google search didn't find seem