Re: [sqlite] a couple of crashing bugs from a fuzzer

2015-01-09 Thread Andreas Kupries
The fuzzer seems to be http://lcamtuf.coredump.cx/afl/ And an interesting blog post about it is http://lcamtuf.blogspot.ca/2014/11/pulling-jpegs-out-of-thin-air.html American fuzzy lop is a security-oriented fuzzer that employs a novel type of compile-time instrumentation and genetic algo

Re: [sqlite] a couple of crashing bugs from a fuzzer

2015-01-08 Thread jungle Boogie
Richard, On 8 January 2015 at 17:29, Richard Hipp wrote: > On 1/8/15, Michal Zalewski wrote: > >> I have been running afl-fuzz against sqlite and bumped in a bunch of >> bugs that seem to crash the sqlite3 binary > > Fixed here: https://www.sqlite.org/src/info/fe578863313128 > > Bug report for yo

Re: [sqlite] a couple of crashing bugs from a fuzzer

2015-01-08 Thread Richard Hipp
On 1/8/15, Michal Zalewski wrote: > I have been running afl-fuzz against sqlite and bumped in a bunch of > bugs that seem to crash the sqlite3 binary Fixed here: https://www.sqlite.org/src/info/fe578863313128 Bug report for your trophy case: https://www.sqlite.org/src/info/a59ae93ee990a55 Nice

[sqlite] a couple of crashing bugs from a fuzzer

2015-01-08 Thread Michal Zalewski
Hey folks, I have been running afl-fuzz against sqlite and bumped in a bunch of bugs that seem to crash the sqlite3 binary (but do not seem to be a security problem, other than in the denial-of-service sense). There are four seemingly distinct patterns, with test cases included inline: -- test1.s