oss-sec mailing list archives

Hanno Boeck found Heartbleed using afl + ASan!

From: "David A. Wheeler" <dwheeler () dwheeler com>
Date: Tue, 07 Apr 2015 16:00:44 -0400 (EDT)

FYI:
Hanno Boeck found Heartbleed using american fuzzy lop combined with Address Sanitizer (ASan):
https://blog.hboeck.de/archives/868-How-Heartbleed-couldve-been-found.html

I've posted a few additional comments here:
http://www.dwheeler.com/blog/2015/04/07/#heartbleed-afl-asan

--- David A. Wheeler

Current thread:

Hanno Boeck found Heartbleed using afl + ASan! David A. Wheeler (Apr 07)
- Re: Hanno Boeck found Heartbleed using afl + ASan! Michal Zalewski (Apr 07)
  - Re: Hanno Boeck found Heartbleed using afl + ASan! Seth Arnold (Apr 07)
  - Re: Hanno Boeck found Heartbleed using afl + ASan! David A. Wheeler (Apr 07)
    - Re: Hanno Boeck found Heartbleed using afl + ASan! Michal Zalewski (Apr 07)
    - Re: Hanno Boeck found Heartbleed using afl + ASan! David A. Wheeler (Apr 07)